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Revision History 


eae be [vm [sme 
January 8, 1999 Release for first internal review 


January 20, 1999 | GMU | Update based on internal review in preparation for first external 
release. Changes in this revision: 
Update based on final internal review and software ISV feed- 
back. Changes in this revision: 
¢ To reduce the number of software options, allow no 
FPU, one with S+D+W+L and one with 
S+D+PS+W+L. 
e Explain the reason for decommitting support for the 
Branch Likely instructions. 
¢ Explain why the SPEC2 variants of instruction multiply 
do not allow multiple destination registers. 
¢ Add L2 cache encodings to the Cache instruction. 
¢ To provide a stable software environment, upgrade the 
compliance level for PageMask, Count, Compare, 
Configl, PerfCnt; TagLo, ‘and TagHi in situations as 
described in the PRA chapter. 
¢ Add the WR bit to Configl.. : 
¢ Reserve CPO register 22 for ‘aplententtons: ‘he 
° Require implementation of at least encodings 2 and 3 in 
the cache coherency attributes. 
: A the first a description of CPO hazards and the 


addres mapping description recast in terms of 
implementation parameters for numbers of virtual and 
a 2 hysical address bits, and generally expanded. 


0.21 July 11,1999 GMU_ Modit clo and clz definitions to use rd as the target register 
instead of rt. Require that software duplicate the target register in 
both register fields to ensure compatibility. 
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October 20, 1999 | GMU | Update with all feedback since last major release. Changes in 
this version: 

° Clarify the difference between the use of Coprocessor 
Unusable Exceptions and Reserved Instruction Excep- 
tions. The cases are now enumerated for each excep- 
tion. 

¢ Add the COP2 interface instructions that allow the pro- 
cessor to communicate with a generic coprocessor. 

¢ Clarify the intent behind the pref instruction hints and 
allow implementation dependent hints. 

¢ Clarify the required Cache instruction encodings and 
the boundary condition between a locked cache line 
and an intervention that hits on the line. 

¢ Note that the VPN/PFN bits corresponding to the bits 
set in the PageMask register may be either preserved or 
zeroed during a TLB write, or a subsequent read. 

* Add descriptions of all of the floating point control reg- 
isters. 3 

¢ Add the floating point soncal register descriptions to 
capture the small changes from the MIPS RISC Archi- 
tecture documents. a: 

° Clarify the exact ‘definition of all operating nipdes | 

including Debug Mode, and note that Debug Mode has 
cess to all Kernel Mode resources. 


Tnclude a warning about potential ive lock in the Ran- 
a _dom register description. 

““e= Clarify the required and the optional cache cheney 
attribute encodings and provide some historical per- 
spective on use. 

Note that the behavior of the Count register in low 
power modes is implementation dependent. 

Clean up the Status register diagram and corresponding: 
descriptions. 

Allow implementation dependent exception cause 
encodings 

Add a description of the PerfCnt register. 

Update the CPO hazards section. 
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October 20, 1999 | GMU | Continue correction of minor errors: 

¢ Clarify delta instruction table encoding to indicate that 
Coprocessor Unusable Exceptions are taken on copro- 
cessor interface instructions only if access to the copro- 
cessor is not enabled. Otherwise, a Reserved 
Instruction Exception is taken on unimplemented 
coprocessor interface instructions. 

¢ Clarify the COPz instruction to note that a Reserved 
Instruction Exception is possible if access is allowed to 
coprocessor z and the COPz instruction is not imple- 
mented for that coprocessor. 

¢ Note that it is implementation dependent whether a 
watch exception occurs on a cache or prefetch instruc- 
tion. The preferred implementation 1s not to cause a 
watch exception on these instructions. 

¢ Correct the reset state of the I, R, and W bits in 
WatchLo. Their reset state should be zero. 

¢ Update the list of initialized state described for the 
Reset and Soft Reset exceptions to be consistent with ‘ 
the values in the CPO register descriptions. 

¢ Clean up the use of sign _extend i in the pseudo-code. 

¢ Fix TLB Write Indexed that should have been-Write 
Random in Random Register description. 

° Add restriction on setting g StatuseRL while executing in 


clarify “Be eaact ge generation of the physical address 

om pfn and va, as a function of the page size in the 

matching TLB entry. 

: Reduce the-size of the address range that transforms 

rom user mapped to unmapped when ERL is a one. 
This increases implementation flexibility by allowing 

the logic that transforms ksegO or kseg! addresses to 

also be used in this instance. 

° Modify cache instruction encodings to support a unified 
secondary and a tertiary cache. 

¢ Add the PC bit in Config! and the M bit in the Perfor- 
mance Counter Control Register to allow software to 
determine how many performance counters are imple- 
mented. | 

¢ Generalize the description of the XContext register to 
use the new SEGBITS parameter. 

¢ Reserve Cause code value 18 for precise Coprocessor 2 
exceptions. | 

¢ Update the CacheErr register description to more accu- 
rately reflect previous MIPS implementations. 

¢ Make it clear that access to all floating point instruc- 

tions is controlled by CU1, not CU3. 
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Povemnet 15, 1999 | GMU | Do final edits for Revision 1.0 release. Changes in this version: 

e Add assembler format for optional third (sel) operand 
of [D]MFCz and [D]MTCz instructions. 

¢ Correct the description of the function of the FR bit in 
the Status register. 

¢ Correct the inconsistencies describing the enabling of 
64-bit operations in Supervisor Mode. When the pro- 
cessor is running in Supervisor Mode, 64-bit operations 
are always enabled. The PX and SX bits in the Status 
register do not affect 64-bit operations. 

¢ Add implementation and programming notes to the 
multiply-related instructions indicating that software 
should place short operands in GPR rt and hardware 
should check that register for data-dependent latency. 

¢ Adda section describing changes to the MIPS RISC 
Architecture specification that are a oa part of 
MIPS64. a 

¢ Ifadeferred watch exception occurs along with another 
exception on the’ same instruction, make it implementa- 
tion dependent. whether the WP bit is set. 

¢ Add optional cache instruction encodings for Second- 

ary and Tertiary caches Also note that cache error 

exceptions can occur ¢ on some cache instruction opera- 


pte t that any TLB instruction may ere a Machine 


dd missing set of ERL on a cache error exception. 

Note that cache and bus errors may be imprecise in 

some cases. 

¢ Note that the preferred rate at which to increment the 

Count register is once per processor cycle. 

_¢ Modify the definition of the xuseg/xsuseg/xkuseg Seg- 
ments to refer to the area above useg/suseg/kuseg. This 

is simply a definition (not a functional) change. 
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1. The MIPS64™ Architecture 


1.1 Architecture and Document Feedback 
Comments or questions on the MIPS64™ Architecture or this document should be directed to 


Director of MIPS Architecture 
MIPS Technologies, Inc. 

1225 Charleston Road 
Mountain View, CA 94043 


or via E-mail to architecture @ mips.com. 


1.22 MIPS64 Overview 


1.2.1 Historical Perspective 


The MIPS® Instruction Set Architecture (ISA) has evolved over:time from the ériginal MIPS I™ ISA to the most 
recent MIPS V™ ISA. As the ISA has evolved, all extensions have been backward compatible with previous versions 
of the ISA. With the MIPS III™ level of the ISA, 64-bit integers and addresses | were added to the instruction set. The 
MIPS IV™ and MIPS V™ levels of the ISA added improved floating point operations, ‘as well as a set of instructions 
intended to improve the efficiency of generated code and of data movement. Because of the strict backward-compati- 
ble requirement of the ISA, such changes were unavailable to 32-bit: implementations of the ISA which were, by def- 
inition, MIPS I™ or MIPS II™ implementations. F ~ ‘sn 


While the user-mode ISA was ers backward cai secra the privileged environment was allowed to range ona 


at impleniéntation was intended to run. 


every operating ee or kernel environment ¢ on n which t 


Many of the original MIPS implementations w were: targeted at’computer-like applications such as workstations and 
servers. In recent years MIPS implementations have had. significant success in embedded applications to the extent 
that most of the MIPS parts that are shipped” Zo into some ‘sort of embedded application. Such applications tend to 
have different trade-offs than computer-like ap ji S. including a focus on cost of implementation, and perfor- 
mance as a function of cost and power. 


1.2.2 The MIPS64 Architecture 


The MIPS64 Architecture is intended to mileage the need for a high-performance but cost-sensitive 64-bit MIPS 

instruction set. It is based on the MIPS V ISA and is backward compatible with the 32-bit MIPS32 Architecture. It 

also brings the privileged environment into the Architecture definition to address the needs of operating ystems and 
other kernel software. The MIPS64 Architecture therefore consists of the following components 


¢ The Instruction Set Architecture based on the MIPS V ISA, with backward compatibility to the MIPS32 
Architecture. 
¢ The 64-bit MIPS Privileged Resource Architecture which defines the requirements for the privileged envi- 


ronment. 
¢ The provision for including MIPS Application Specific Extensions (ASEs) to address the specific needs of 
particular markets. 
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2. The MIPS64 ISA 


The MIPS64 instruction set includes the following instructions: 


* The MIPS V CPU instructions 

¢ The MIPS V FPU instructions 

¢ A set of new instructions targeted at embedded applications. 

¢ The instructions which act as the ISA interface to the MIPS Privileged Resource Architecture 


This specification does not describe many of these instructions in any detail because it is assumed that the reader also 
has access to the most recent copy of the two-volume set entitled MIPS RISC Architecture. Only differences and 
additions are described in this document. Upon completion of the review process, this document will be incorporated 
into the MIPS RISC Architecture document. _ 


2h Compliance and Subsetting 


To be compliant with the MIPS64 Architecture, designs must implement a set of required features, as described in 
this document. To allow flexibility in implementations, the MIPS64 Architecture does provide subsetting rules. An 
implementation that follows these rules is compliant with the MIPS64 Architecture as long as it adheres strictly to the 
rules, and fully implements the remaining instructions. Supersetting of the MIPS64 Architecture i is only allowed by 
adding partner-specific functions to the SPECJAL2 major opcode, by adding control for co-processors via the COP2, 
LWC2, SWC2, LDC2, and/or SDC2 opcodes, or via the addition of — Application Specific Extensions. The 
subsetting rules are: 


e All CPU instructions must be implemented - no subsetting is aigwed 

¢ The FPU and related support instructions, including the MOVF and MOVT CPU jsihicdons may be omit- 
ted. If the FPU is implemented, the paired single (PS) format i optional. Therefore, the following allowable 
FPU subsets are compatible with the MIPS64 architecture: 
¢ No FPU 
¢ FPU with S, D, W, and L formats and, 
¢ FPU with S, D, PS, W, and L format 

¢ Implementation of the full 64-bit address space 
operations with a 32-bit only address'space. In 
abled. - 

¢ Supervisor Mode is optional. If Su ervis 
ignored on write and read as zero. = 


management unit is implemented, it must be the standard. TLB-based 
MMU as described in the Privileged Resource Architecture chapter. 

¢ The Privileged Resource Architecture includes several implementation options and may be subsetted in 
accordance with those options. 

¢ Instruction, CPO Register, and CP] Control Register fields that are marked “Reserved” or shown as “OQ” in 
the description of that field are reserved for future use by the architecture and are not available to implemen- 

. tations. Implementations may use those fields that are explicitly reserved for implementation dependent use. 
¢ CPO Register and CP! Control Register encodings that are not currently used are reserved for the future use 
of the architecture and are not available to implementations. Implementations may use those encodings that 

are explicitly reserved for implementation dependent use. 

e EJTAG and the ASEs are optional and may be subsetted out. If they are implemented, they must implement 
the entire ISA applicable to the component, or implement subsets that are approved the EJTAG or ASE 
specifications. 

¢ If any instruction is subsetted out based on the rules above, an attempt to execute that instruction must cause 
the appropriate exception (typically Reserved Instruction or Coprocessor Unusable). 
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2.2 Changes to Revision 5.1 of the MIPS RISC Architecture Specification 


In addition to the MIPS64 Architecture described in this document, the following changes to Revision 5.1 of the 
MIPS RISC Architecture Specification are required for compliance with the MIPS64 Architecture: 


¢ The MIPS IV ISA added a restriction to the load and store instructions which have natural alignment 
requirements (all but load and store byte and load and store left and right) in which the base register used by 
the instruction must also be naturally aligned (the restriction expressed in the MIPS RISC Architecture 
Specification is that the offset be aligned, but the implication is that the base register is also aligned, and this 
is more consistent with the indexed load/store instructions which have no offset field). The restriction that 
the base register be naturally-aligned is eliminated by the MIPS64 Architecture, leaving the restriction that 
the effective address be naturally-aligned. 

¢ Early MIPS implementations required two instructions separating a mflo or mfhi from the next integer mul- 
tiply or divide operation. This hazard was eliminated in the MIPS IV ISA, although the MIPS RISC Archi- 
tecture Specification does not clearly explain this fact. The MIPS64 Architecture explicitly eliminates this 
hazard and requires that the hi and lo registers be fully interlocked in hardware for all integer multiply and 
divide instructions (including, but not limited to, the madd, maddu, msub, msubu, and mul instructions intro- 
duced in this specification). 

¢ The Implementation and Programming Notes included in this specification for the madd, madden msub, 
msubu, and mul instructions should also be applied to all integer multiply, and divide instructions in the 
MIPS RISC Architecture Specification. | 


2.3 CPU Architecture 


» 


2.3.1 CPU Register Overview 
The MIPS64 Architecture defines the following CPU registers: * 


¢ 32 64-bit general purpose registers (GPRs) . 

* a pair of special-purpose registers to hold t 
operations (HI and LO) 5 

* a special-purpose program counter (PC), whic 
_architecturally-visible register. 2 


operate on 32 bits. Such instructions typically sign- “extend their 32: bit result into 64 bits. In so doing, 32-bit programs 
work as expected, even though the registers are actually 64 bits wide rather than 32. _ 
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Figure 1: CPU Registers in MIPS64 Native Mode 
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General Purpose Registers 


2.3.2 Endianness 


Compliant implementations of the MIPS64 Archit ire must be bi-endian. That is, they must be capable of running 
in either a big-endian or a little-endian byte order, as selected by an implementation-specific power-up sequence. The 
BE bit in the Config register, set as part of the power-up sequence, indicates the endian mode in which the processor 


nea 


is running. It is implementation-dependent whether reverse-endian mode is implemented. 


2.3.3 CPU Instruction Overview 


Table 1 through Table 9 list‘the CPU instructions that are part of the MIPS64 ISA. If 64-bit operations are not 
enabled, certain instructions, as described in the Instruction Bit Encoding tables, are not legal and result in a Copro- 
cessor Unusable Exception or Reserved Instruction Exception, as appropriate to the type of instruction. 


Note 


Although the Branch Likely instructions are included in this specification, software is strongly encouraged to 
avoid use of the Branch Likely instructions, as they will be removed from a future revision of the MIPS64 
architecture. The Branch Likely instructions were added to the ISA at a time when processor implementations 
were much simpler. Since that time, implementation of the Branch Likely instructions has been shown to be 
increasingly difficult and costly on processors with aggressive branch prediction. Continued use by software 
will result in serious performance issues as such processor designs penetrate the embedded market. The 
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Branch Likely instructions are listed in Table 8 and Table 15. 


Table 1: CPU Load, Store, and Memory Control Instructions 


Original 
Mnemonic Instruction MIPS ISA 
Level 


eave 

BU [Koad ByeUmigned 
[Coad Malword 
HU [Toad Malword Uwsanes | 
[LeadWord 


tS 


Z 


wT 


Air! MI nI ni mM a 


‘BS 


o) 
se) 


en 


= 


= 


Load Linked Word 
Store Conditional Word 


Gr 


Synchronize Memory Operations | i “Tl | lies 
Load Doubleword 
Load Doubleword Left 
Load Doubleword Right 
Load Linked Doubleword 
Load Word Unsigned . 
Store Conditional Doubleword 
Store Doubleword 
Store Doubleword Left 
Store Doubleword Right ° 
Prefetch Memory:] Data’ : : 
Prefetch Memory Data Tadexed 


SYNC 

LD 

LDL 
D 


v2) 


SC 


” 
eS) 
Ww 


Mi ~ ry re 
Ul Oo =52 
ell] Shu 


: 


PREFX 


Table 2: CPU Arithmetic iastenctnns 


Original 
MIPS ISA 
Level 


[RD aE Weed 
ee Se 
MOLT Maiply Word 
psct____——«d Seton kevin 
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Table 2: CPU Arithmetic lustructions 


Original 
Mnemonic Instruction MIPS ISA 
Level 


et on Less Than Immediate | 


ScTIU 
STU 
S 
& 


SUB 
SUBU 
DADD i 
DADDI 

Il 

It 

Hil 


DADDIU___| Add Immediate Unsigned Doubleword_———+[ im 
DADDU___| Add Unsigned Doubleword Si 
DDIV | Divide Doubieword SS 
pDIvu 
DMUCT 
DMULTU 


DSUB Subtract Doubleword 


DSUBU 


e 


Logical AND 
Logical AND Immediate ~” 


Table 4: CPU Move Instructions 


Original 
MIPS ISA 
Level 


Mnemonic Instruction 


naee 


MFR [ Move om PT 
Move fom 0 
vi 
wiTLO 
Move Conditional on Floating Point False 
MOVN Move Conditional on Not Zero 
MOVT? Move Conditional on Floating Point True 
MOVZ Move Conditional on Zero | 
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a. These instructions require a floating point unit and may be subsetted out if no 
floating point unit is implemented. 


Table 5: CPU Shift Instructions 


Original 
MIPS ISA 
Level 


Mnemonic Instruction 


L shift Word Left Logica 
SLLV hift Word Left Logical Variable 
SRA Shift Word Right Arithmetic 
SRAV hift Word Right Arithmetic Variable 
hift Word Right Logical 
SRLV Shift Word Right Logical Variable 
DSLL 
DSLL32 
DSLLV a 
DSRA 


DSRA32 Shift Doubleword Right Arithmetic + 32 
DSRAV Shift Doubleword Right Arithmetic Variable am | 
Shift Doubleword Right Logical aah, aoa | ) oe 
Shift Doubleword Right Logical + 32 . 


io) S22) 


oa) 
v9) 
7 
o 


% 
anaes 
ea he 


7 
F 


. lla pn 


DSRL32 
DSRLV 


“Original 
Level 


ro 


Branch on Less Than Zero, 3 


Jump and Link 


Jump and Link Register | 
MIPS ISA 


Mnemonic 7 Instruction 
Level 


PBREAK | Breakpomt SSS 


feos 


Original 


SYSCALL System Call 
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Table 7: CPU Trap Instructions 


Original 
MIPS ISA 


Mnemonic Instruction 


TEQI Trap if Equal Immediate 


Trap if Greater Than or Equal Immediate 

: 
TLT | Trap if Less Than | 

Trap if Less Than Immediate Unsigned 

Trap if Not Equal 


TNEI Trap if Not Equal Immediate 


Table 8: Obsolete* Branch Instructions 


g | =2Original 
Mnemonic Instruction “i MIPS ISA 
al Level tig 


- | BGEZALL 


BGEZL 


BGTZL 


Branch on NovEqual Likely 
a. Software is strongly encouraged tc avoid use 0 the Branch Likely instructions, 
as they will be removed from a future revision of the MIPS64 architecture. 


Bats 


‘Branch on Greater Than or Equal Zero Likely 


Branch on Greater Than Zero Lik ly. % 


Original 
MIPS ISA 


Level — 


Count Leading Zeros in Word 


Mnemonic 


C 
MADD | Multiply and Add Word MIPS32 
MADDU Multiply and Add Unsigned Word MIPS32 


MSUB Multiply and Subtract Word MIPS32 
Multiply and Subtract Unsigned Word MIPS32 
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Table 9: Embedded Application Instructions 


Original 
MIPS ISA 
Level 


|MUL |: Multiply Word to Register IPS 
SSNOP Superscalar Inhibit NOP MIPS32 


2.4 FPU Architecture : 


Mnemonic Instruction 


2.4.1 FPU Register Overview 
The MIPS64 Architecture defines the following FPU registers: 


e 32 64-bit floating point registers (FPRs). 
¢ Five FPU control registers 


For compatibility with MIPS32 processors, a MIPS64 processor can be configured to run in a mode in which the 
FPRs are treated as 32 32-bit registers, each of which is capable of storing only 32-bit data types. In this mode, the 
double-precision floating point (type D) data type is stored in even-odd pairs of FPRs, and the long-integer (type L) 
and paired single (type PS) data types are not supported. ~ FR oo 


Figure 2: FPU Registers if Status isl’ 


General Purpose Registers Special Purpose Registers 
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2.4.2 FPU Instruction Overview 


Table 10 through Table 15 list the FPU in 
run in the mode providing backward compati 
Instruction Bit Encoding tables, are not legal 
instructions which operate on paired single floating 
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LWXCI 


LDXCl Load Doubleword Indexed to Floating Point 
Store Doubleword Indexed to Floating Point 
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Figure 3: FPU Registers if Statuspp is 0 


32 31 


ee. EY, 


MIPS32 processors, certain instructions, 


Original 
_.MIPS ISA 
Level 


-10- 
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Table 10: FPU Load and Store Instructions 


Original 
MIPS ISA 
Level 


ae: ae 


Mnemonic Instruction 


PSWACL store Word Indexed to Floating Point 


LUXC1 Load Doubleword Indexed Unaligned to Floating 
Point 

SUXC1 Store Doubleword Indexed Unaligned to Floating 
Point 


Table 11: FPU Arithmetic Instructions 
Level 


Mnemonic Instruction 


PABSimt | Floating Point Absolute Value 
ADD.fmt Floating Point Add ea) an 
Floating Point Compare 


DIV.fmt a 


Original 
MIPS ISA 


; Naps 


Pod 
7 


eg Original 
Mnemonic Instruction MIPS ISA 
| menage Level 


| CTC1 Copy Word to Floating Point Control Register Rie 2 
Mowe Word rom FPR 
MOV.fmt Floating Point Move | a es = 


FCI opy Word from Floating Point Control Register 


Floating Point Conditional Move on Zero | | IV, V, MIPS64 | 


I 
I 
_ I 
J 
I 
IIT © 
Ill 
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Table 13: FPU Convert Instructions 


Original 
MIPS ISA. 
Level 


Mnemonic 


TW 


[Floating Point Convert to Word Fixed Point [OT 
CVTD-fmt [Floating Point Convert to Double Floating Point [LIN | 
CVTS fmt 
CEIL.W.imt | Floating Point Ceiling to Word Fixed Point [| 
FLOOR.W.fmt | Floating Point Floor to Word Fixed Point [| 
ROUND.W.fmt | Floating Point Round to Word Fixed Point [| 
TRONC.Wefmt | Floating Point Truncate to Word Fixed Point | 
CEILLfmt | Floating Point Ceiling to Long Fixed Point | 
CVTLimt | Floating Point Convert to Long Fixed Point [| 
FLOOR L-fmt 
ROUND.L.fmt | Floating Point Round to Long Fixed Point | 
TRONC.L fii 
ALNVPS 


CVT.PS.S Floating Point Convert Pair to Pair Single 
CVT.S.PL 
CVT.S.PU 
PLL.PS 
PLU.PS 
PUL.PS 
PUU.PS 


‘fa Y 
ca : 
iil sf 
i 


Floating Point Convert Pair Lower to Single 
Floating Point Convert Pair Upper to Single 
Floating Point Pair Lower Lower 


Floating Point Pair Lower Upper 
Floating Point Pair Upper Lower yx 
Floating Point Pair Upper Upper 


Original 
MIPS ISA 
Level 


EEE i ho 


Original 
MIPS ISA | 
Level 


Branch on Floating Point False Likely 7 
Branch on Floating Point True Likely ©. WDE © 52 
a. Software is strongly encouraged to avoid use of the Branch Likely instructions, | 
as they will be removed from a future revision of the MIPS64 architecture. 


Instruction 


2.5 Coprocessor Architecture 


The MIPS64 Architecture supports the use of an additional coprocessor to perform application-specific tasks. Support 
for this coprocessor is provided by instructions, described below, that act as the control and data movement interface 
between the CPU and the coprocessor. The flexibility of this interface places almost no restrictions on the coproces- 
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sor, other than the fact that the coprocessor load and store instructions can only address 32 coprocessor-specific regis- 
ters. It is implementation dependent whether all twelve coprocessor interface instructions are implemented - a subset 
of the instructions may be implemented as dictated by the requirements of the specific coprocessor. If the coprocessor 
is implemented and usage is enabled, an attempt to execute an unimplemented coprocessor interface instruction 
results in a Reserved Instruction Exception. 


2.5.1 Coprocessor Instruction Overview 


Table 16 lists-the interface instructions supported by the MIPS64 Architecture. _ 


Table 16: Coprocessor Interface Instructions 


Original 
MIPS ISA 
Level 


Branch on Coprocessor 2 Condition 
CFC 
COP: 
CTC _MIPST 
DMFC | Move Doubleword trom Coprocessor? | 


DMTC2 Move Doubleword to Coprocessor 2 
LDC2 
LWC2 
MFC2 


Mnemonic Instruction 


MIPS II 


aN | MIPSI | 
oly 
f 
eee 
a : 
~ ae ae 
Kot bie gs fy 


Load Doubleword to Coprocessor 2 
Load Word to Coprocessor 2 
Move from Coprocessor 2 
Move to Coprocessor 2 - 
Store Doubleword to Coprocessor' Ee : 
Store Word to Coprocessor 2 2” | 


2.6 Privileged Instruction Set Architect re. 


2.6.1 Privileged Register Overview 
The MIPS64 Architecture defines a set of privileged registers as described in Chapter 3. 


2.6.2 Privileged Instruction Overview __ | 
Table 17 lists the privileged instructions which act as the ISA interface to the MIPS Privileged Resource Architecture. 


Table 17: Privileged Instructions 


_ | CACHE =|: Perform cache Operation | 
MICO 
RET : 

CO | , 


Instruction 


D 
[LBP | Translation Look Aside BuferProbe__—_—+ 
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Table 17: Privileged Instructions 


2.7 EJTAG Support Instructions - 


Table 18 lists the EJTAG support instructions that are supported by MIPS64. Refer to the EJTAG specification for 
more information about these instructions. | 


Table 18: EJTAG Support Instructions 


SDBBP Software Debug Breakpoint 


2.8 Instruction Bit Encoding 


Table 20 through Table 34 describe the encoding used for the MIPS64 ISA:T ble 1! 
symbols used in the tables. 3 es 


Operation or fle 
such an instruction must cause. 


higher-order MIPS IS 


must cause a Reserved Instruction Exception (non-coprocessor encodings or coproces- 
sor instruction encodings for a coprocessor to which access is allowed) or a Coproces- 
sor Unusable Exception (coprocessor instruction encodings for a coprocessor to which 
access is not allowed). -_ = —— 

Operation or field codes marked with this symbol are available to licensed MIPS part- 
ners. To avoid multiple conflicting instruction definitions, the partner must notify MIPS 
Technologies, Inc. when one of these encodings is used. If no instruction is encoded 
with this value, executing such an instruction must cause a Reserved Instruction Excep- 
tion (SPECIAL2 encodings or coprocessor instruction encodings for a coprocessor to 
which access is allowed) or a Coprocessor Unusable Exception (coprocessor instruc- 
tion encodings for a coprocessor to which access is not allowed). 
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Table 19: Symbols Used in the Instruction Encoding Tables 


with this symbol represent an EJTAG support instruction and 
implementation of this encoding is optional for each implementation. If the encoding is 
not implemented, executing such an instruction must cause a Reserved Instruction 
Exception. If the encoding is implemented, it must match the instruction encoding as 
shown in the table. 


Operation or field codes marked with this symbol are reserved for MIPS Application 
Specific Extensions. If the ASE is not implemented, executing such an instruction must 
cause a Reserved Instruction Exception. 


Operation or field codes marked with this symbol are obsolete and will be removed 
from a future revision of the MIPS64 ISA. Software should avoid using these operation 
or field codes. 


| DsLLV L ‘aa aes DSRLV | | DSRAV L 
4 rs DMULTU DDIV L DDIVU L 


XOR NOR 


ro[ oo | ena | scez | ouray | scene] + | = | «| 
crfo [tot | toe | mm | mm | ma | | me] | 
rx [wo | purzat | acezat |aurzattefacezarce] + [= | | 
OMe ee ee 
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Table 23: MIPS64 SPECIAL2 Encoding of Function Field 


bits 2..0 


010 ~ mo OMT 


ro [0 | Meco | bMrcol |= | * | mcd [omrol]* | 
ipop = | * | - | = | - | * | = | 
ae 

a 
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Table 28: MIPS64 COPO Encoding of Function Field When rs=CO 


function bits 2..0 


DERET o 


Ac Aa AG SR DN SO (DO 
bis 25.241 000 | oor] 10 | om | oo | i] 0] 
pe Tao [ier ower [ener [+ are one Ef Serer f+ 
[for [ners pera elfctanvs sell Ss a 
app sé | ps | |= | we |; 


[0 [ow | app [sus | 
i001 [ROUNDE LT [FRUNCET [Cent I[R 


[Mov | 
[RUNG eI W | FLOOR 
A NS 


CF C.UN CEO. UEQ., | COLT C.ULT C.OLE C.ULE 
CABS.Fel | CABS.UN eL. CABS. EQ ee CABS. UEQ ‘eL|CABS.OLT eL|CABS.ULT eL|CABS.OLE eL|CABS.ULE eL 


Pay C.SF C.NGLE = C. | : CIT C.NGE C.LE C.NGT 
CABS.SFeL ICABS.NGLE€ CABS. SEQ a CABS. NGLeL} CABS.LT el |CABS.NGE el] CABS.LEeL |CABS.NGT eL 


bits 5.3 | 000 

FO a 
[1 [001 | RounD.LL | TRUNCLI | CELL | FLooRL. | ROUND.W_| TRUNC.W | CEIL.W | FLOOR.W_ 
pool movers | move | mot > | koe sor Df 
P3foufooo* |  * ft  * | *  Recip2eL | REcIPieL | RSQRTIeL | RSQRT2el 
a SE 

ae eee ee ee 


110 C.F C.UN a EQ C. a a OLT a ULT C. + C. ——* 
CABS.Fel | CABS.UNeL | CABS.EQeL |CABS.UEQ£L|CABS.OLT cL |CABS.ULT eL|CABS.OLE eL|CABS.ULE el 

- C.SF C.NGLE C.SEQ CNGL CLT ENCE aie ENG 
CABS.SF el ICABS.NGLE cl]CABS.SEQ eLICABS.NGLeL| CABS.LT el |CABS.NGE ¢L] CABS.LEeL |CABS.NGT eL 


November 15, 1999 -17- 


MIPS® PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 | MIPS64™ Specification 


Table 32: MIPS64 COPI Encoding of Function Field When rs=W or L? 


a. Format type L is legal only if 64-bit operations are enabled. 


Table 33: MIPS64 COP1 Encoding of Function Field When rs=PS* 


function | 


[or [abeme [were [aan cr ae 
pion [evesru [seve 7 a DE On 
“= C.ULT 


rs [ror evs [> 
* C.OLE C.ULE 
_ CABS. ULT « | CABS.OLE € | CABS.ULE € 


110 CE C.UN C.EQ | 
CABS.F € CABS.UNe€ | CABS.EQE 
C.SF C.NGLE : ~ C.NGE C.LE C.NGT 
CABS.SFe |CABS.NGLEe} CABS.SEQ €° CABS.NGEe | CABS.LEe | CABS.NGT € 


NS 
rf [swxer_[spxcr_ | | = | =| suxcr_ | > —*d|PRERK 
zfoof* | |= | |= ~+| * || * 
re | io0 | ADDS | MappD | - |» |» |» | Mapbes |= _ 
rs fio | sues | msuap [= |» |» |= | Msuprs | * | 
re [iio | NMaDbS [NMapDD | = | > |» | * | Nwapprs[ > 
Pfam [awsuas [wwsusp [= | > |» |» _[ xwsuaes[ > | 


a. COP1X instructions are legal only if 64-bit operations are enabled. 
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2.9 MIPS64 Instruction Descriptions 


As described earlier, this specification does not include instruction descriptions for all instructions that are in the 
MIPS64 ISA. Rather, it includes by reference the MIPS RISC Architecture document for the majority of the instruc- 
tions. The following sections describe only those ISA-related features and any instructions that are new or modified 
by their inclusion in MIPS64. 


2.9.1 UNPREDICTABLE and UNDEFINED 


The terms UNPREDICTABLE and UNDEFINED are used throughout this specification to describe the behavior of 
the processor in certain cases. UNDEFINED behavior or operations can occur only as the result of executing instruc- 
tions in a privileged mode (i.e., in Kernel Mode or Debug Mode, or with the CPO usable bit set in the Status register). 
Unprivileged software can never cause UNDEFINED behavior or operations. Conversely, both privileged and 
unprivileged software can cause UNPREDICTABLE results or operations. 


2.9.1.1 UNPREDICTABLE 


UNPREDICTABLE results may vary from implementation to implementation, instruction to instruction, or as a 
function of time on the same implementation or instruction. Software can never depend on results that are UNPRE- 
DICTABLE. UNPREDICTABLE operations may cause a result to be generated or not. If a result is generated, it is 
UNPREDICTABLE. UNPREDICTABLE operations may cause. aroitrary exceptions, 


UNPREDICTABLE results or operations have several implementation restrictions: 


¢ UNPREDICTABLE results must not depend on any data source (memory or internal stte) which are inac- 
cessible in the current processor mode. . 


which is inaccessible in the current processor mode: For SearBles UNPREDICTABLE operations executed 
in user mode must not access memory or Lg State that is only accessible i in Kernel Mode or Debug 
Mode or in another process. . 

¢ UNPREDICTABLE operations must not: thal or haat the proceson 


2.9.1.2 UNDEFINED 


UNDEFINED operations or behavior may vary Y trot, implement on to implementation, instruction to instruction, or 
as a function of time on the same implementation or instruction. UNDEFINED operations or behavior may vary 
from nothing to creating an environment in which execution can no oRECr continue. UNDEE Pee operations or 
behavior may cause data loss. wie He 


UNDEFINED operations or Baier he 3S One implementation restriction: 


¢ UNDEFINED operations or behavior must not cause the processor to hang (that is, enter a state from which 
there is no exit other than powering down the processor). The assertion of any of the reset signals must 
restore the processor to an operational state. 
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2.9.2 Unprivileged Instructions 
2. 9.2.1 The BCz instruction 
"Branch on Coprocessor Condition oe fea | ; 5 oe eee ae. z ; eB Ce ga 39 


31 26 25 21 20 16 15 0 


COPz 


010022 


Format: 
BCzCond offset . MIPS64 


Purpose: 
Branch to the specified address if the coprocessor condition is met. 


Description: a 
A branch target address is computed from the sum of the address of t the it instruction in the delay slot and the 
16-bit offset, shifted left two bits and sign extended. Branch to that address if, the coprocessor z condition is 


- 


Pech coprocessor number specified 


Np 
a 


Note that the BCz instruction is actually a class of instructions, on 
by z, and including taken and not taken variants. 


Restrictions: 
If the coprocessor enable bit for coprocessor z: 


0 in the Status r 


gister, access to this coprocessor IS a 


miamue: in Kernel Mode or Debug Mode, aé 
Status register. 


For coprocessor 0, this instruction is not valid and re re in a Reserved Instruction Exception if access is 
allowed to coprocessor 0. A Reserved Instrtiction Exception is also initiated if BCz is not implemented for 
coprocessor Z. | 


Operation: 
I: if (Statuscy, = 1) or | 
((z = 0) and ((Statusy sy= 005) or (Debugpm = 1) or (Statusey, = 1) or (Statusgpr, = 1))) then 
# Access allowed to coprocessor z_ 
if ((z = 0) or (BCz Not Implemented)) then _ 
InitiateReservedInstructionException 
endif | 
target_offset + sign_extend(offset || 07) 
else : 
# Access not allowed to coprocessor z 
InitiateCoprocessorUnusableException(z) 
endif 
I+1:If COPz.Condition[Cond] then 
PC < PC + target_offset 
endif 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
November 15, 1999 | 290s 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Reserved Instruction Exception (Access allowed to coprocessor and coprocessor 0 or BCz not implemented 
for this coprocessor) 
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2.9.2.2 The CFCz Instruction 
Move oe from pencil - es . a ae _, *2 ea - ; CFCz 7 
26 25 20 16 15 11.10 0 


0 


00000000000 


Format: 
CFCz _ rt,rd MIPS64 


Purpose: 
Move the contents of a coprocessor control register to a general register. 


Description: | 
The contents of the control register rd of coprocessor z are sign-extended and loaded into general register rt. 


Restrictions: a : 
If the coprocessor enable bit for coprocessor z is zero in the Status register, access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor Unusable ‘Exception. If the Processor i is 


Status pes A % r coe 


For coprocessor O, this instruction is not valid and results in a Reseed Instruction Exception if access is 
allowed to coprocessor 0. A Reserved Instruction Exception i is also. aes if CFCz is not implemented for 
coprocessor Z. S 


‘not contain a control register as specified by rd. 


The results are UNPREDICTABLE if coprocessor 


Operation: 
if (Statuscy, = 1) or 


((z = 0) and ((Statusy sy= woe or r (Debus : 1) or ( tatusex, = 1) or (Statusgpry = 1))) then 


endif 
temp <— CCR[z,rd] 
GPR[rt] <— sign_extend(temp) 
else 
# Access not allowed to coprocessor z 
InitiateCoprocessor UnusableException(z) 
endif , 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (Access allowed to coprocessor and coprocessor 0 or CFCz not imple- 


mented for this coprocessor) 
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2.9.2.3 The CLO Instruction) 
Count — Ones in Word = eae. : oe : ban ws oe 7 adie Stee a “+ €LO a 


26 25 15 11. 10 6 5 0 


SPEC2 rd 0 CLO 
011100 00000 100001 
5 5 6 
Format: 
CLO rd, rs MIPS64 
Purpose: 


Count the number of leading ones in a word 


Description: 
Bits 31..0 of GPR rs are scanned from most significant to least significant bit. The number of leading ones is 
counted and the result is written to GPR rd. If all of bits 31..0 were set in ove rs, the result written to GPR 
rd is 32. ; 
Architecture Change > : 
Hardware/Software Implementation Note 
_In an earlier release of this document, the destination GPR of this inzicucton was specified by the rt 

field. In order to align the definition of this instruction with other similar instructions, the architecture 
has changed to specify the destination GPR with the rd field. The following items provide a transpar- 
ent transition between previous and current architecture definitions: 


¢ Current processor designs should be a a _aneee the new definition to the extent that it is 
convenient to do so. ° : 


Restrictions: Gs. Seta — gee, ake Z — aS. cy | 
If GPR rs does not contain a sign-exten ea 32. bit eke (its € 63. .31 equal), then » the results of the operation 
are UNPREDICTABLE. SR : 


Operation: 
if NotWord Value(GPR[rs]) then 
UNPREDICTABLE 
endif 
temp <— 32 
foriin31..0 
if GPR[rs]; = 0 then 
temp < 31-1 
break 
endif 
endfor 
GPR[rd] <— temp 


Exceptions: 
None 
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2.9.2.4 The CLZ Instruction 


CLZ 


100000 


Format: . 
CLZ rd, rs MIPS64 


Purpose 
Count the number of leading zeros in a word 


Description: 
Bits 31..0 of GPR rs are scanned from most significant to least significant bit. The number of leading zeros is 
counted and the result is written to GPR rd. If none of bits 31..0 were set in GPR rs, the result written to 
GPR rd is 32. ; : 


Architecture Change 
Hardware/Software Implementation Note 


In an earlier release of this document, the destination GPR of thi eicoon was specified by the rt 
field. In order to align the definition of this instruction with other similar instructions, the architecture 
has changed to specify the destination GPR with the rd. field The following items provide a transpar- 


Software must place the same GPR number th the rt and rd fields of the instruction. This will 
guarantee correct execution on implementations of both previous and current architecture defini- 
tions. This is required to be compliant’ he MIPS32 and MIPS64 architecture. 

¢ New processor designs should use the rd Id. sthe destination GPR number. 

¢ (Current processor designs should b hanged eflect the new definition to the extent that it is 


convenient to nee SO. 


Restrictions: os ‘, 
If GPR rs does not contain a sign- -extended 32 
are UNPREDICTABLE. : 


it value (bits 63..31 equal), then the results of the operation 


Operation: 
if NotWord Value(GPR[rs]) then 
UNPREDICTABLE 
endif 
temp <— 32 
foriin31..0 
if GPR[rs]; = 1 then 
temp <— 31 -i 
break 
endif 
endfor 
GPR[rd] < temp 


Exceptions: 


None 


November 15, 1999 24 - 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLIC ATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


2.9.2.5 The COPz Instruction 
. Coprocessor Operation for Coprocessorz boa Stas ia 2h COPz 


31 26 25 24 0 


Coprocessor Function 


Format: 
COPz rt, rd MIPS64 


Purpose: 
Perform the coprocessor function specified by Bits {24:0}. 


Description: 
A coprocessor function, as described by Bits [24:0], is performed that 1 Is on to coprocessor z. Refer to 
the instruction descriptions for each coprocessor for more details. we 


Restrictions: Bae 
If the coprocessor enable bit for coprocessor z is zero in the Savi eciiee access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor. Unusable Exception. If the processor is 
running in Kernel Mode or Debug Mode, access to pases Ois enabled even if the CU0 bit is zero in the 
Status register. . 


: ay a 


Shp acs aie 


mented for that coprocessor. 


Operation: 
if (Statuscy, = 1) or 
((z = 0) and ((Statusygy= 003) or Debuspm 


# Access allowed to coprocessor z 
if (COPz Not Implemented) then 
InitiateReservedInstructionException 


endif ae aoe ae ee 
GoproseesorOperstione: Cc )pr cessorEunction) 


yor (Statusgxy = 1) or (Statusgpp, = 1))) then 


else - 2 : 
# Access not allowed to coprocessor Z = 
InitiateCoprocessorUnusableException(z) 
endif 


Exceptions: 
_ .Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (Access allowed, and COPz not implemented for this sapiccessen 
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2.9.2.6 The CTCz Instruction 


Move Control to Se a ae a Sha. a ie a eS CTCz - 
26 25 20 1615 1110 0 
COPz | 0 
0100z2z eee 00000000000 
Format: 
CTCz rt, rd MIPS64 
Purpose: 


Move the contents of a general register to a coprocessor control register. 


Description: 
Bits 31..0 of GPR rt are loaded into the control register rd of coprocessor z. 


“% 


Restrictions: po 
If the coprocessor enable bit for coprocessor z is zero in the Status register, access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor Unusable. Exception.. Tf the processor is 
running in Kernel Mode or Debug Mode, access to Cop oceses Oi i abled « even if the CUO bit is zero in thé 
Status register. 


For coprocessor 0, this instruction is not valid and results i in a i Reseed Instruction Exception if access is 
allowed to coprocessor 0. A Reserved Instruction Exception i IS. ‘also initiated if CTCz is not implemented for 
coprocessor Z. 


The results are UNPREDICTABLE if co control register as specified by rd. 
Operation: | 
if (Statuscy, = 1) or 2, 


((z = 0) and ((Statusp sy= 00>) or Debuli ) ( tatusey = 1) or (Statusgp, = 1) then 


# Access allowed to coprocessor Z 
if ((z = 0) or (CTCz Not Implemented) then 3 


InitiateReservedInstructionEx 
endif 
temp <— GPR{rt] 
CCR[z,rd] <- temp ey 
else 
# Access not allowed to coprocessor z 
BU GIES OD IOC Esso eee ene cRoen(2) 
endif 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (Access allowed to coprocessor and coprocessor 0 or CTCz not imple- 
mented for this coprocessor) 
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2.9.2.7 The DCLO Instruction 
Count Leading Ones in Doubleword tg - ae GAP Ge, Sete ste ee DCLO nes 


DCLO 


100101 


Format: 
DCLO _ rd,rs MIPS64 


Purpose: 
Count the number of leading ones in a doubleword 


Description: 
Bits 63..0 of GPR rs are scanned from most significant to least significant bit. The number of leading ones is 
counted and the result is written to GPR rd. If all of bits 63..0 were set. in GPR rs, the result written to GPR 
rd is 64. Z 
Architecture Chane s 


Hardware/Software Implementation Note 


In an earlier release of this document, the destination GPR of this dastruction was specified by the rt 
field. In order to align the definition of this instruction, with other similar instructions, the architecture 
has changed to specify the destination GPR with the. rd field. The following items provide a transpar- 
ent transition between previous and current architecture definitions: 


¢ Software must place the same GPR number i in. both the rt and rd fields of the instruction. This will 


convenient to do so. 
Restrictions: 


results in a Reserved Instruction ene * 


Operation: a: 
if not MIPS64OperationsEnabled() then 
InitiateReservedInstructionException() 
endif 
temp <- 64 
for iin 63 ..0 
if GPR[rs]; = 0 then 
temp < 63-1 
break 
endif 
endfor 
GPR[rd] <— temp 


Exceptions: 


Reserved Instruction Exception 
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2.9.2.8 The DCLZ Instruction 
Count Leading Zeros in Doubleword oe ee : : | ye : me gia hs Scns " CLZ 


Format: 
DCLZ _rd,rs MIPS64 


Purpose 
Count the number of leading zeros in a doubleword 


Description: 
‘Bits 63..0 of GPR rs are scanned from most significant to least significant bit. The number of leading zeros is 
.: counted and the result is written to GPR rd. If none of bits 63. Ov were ‘Set in SES rs, the result written to 
GPR rd is 64. aa | , 


Architecture Change 


In an earlier release of this document, the destination GPR of this instruction was specified by the rt 
field. In order to align the definition of this instruction with other similar instructions, the architecture 
has changed to specify the destination GPR with the ned f field 


convenient to do so. 


Restrictions: 


Operation: a: 
if not MIPS64OperationsEnabled() fon. 
InitiateReservedInstructionException() 
endif 
temp < 64 
for iin 63 ..0 
if GPR[rs]; = 1 then 
temp < 63 -i 
break 
endif 
endfor 
GPR[rd] < temp 


Exceptions: 


Reserved Instruction Exception 
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2.9.2.9 The DMFCz Instruction 


rene Move eee ; A ee oS Bon! ie Re oa OS teat oe me ae ne -DMFCz . 
26 25 21 
COPz DMF 
01002zZz 00001 suo CNOG 
Format: 
DMFCz rt, rd MIPS64 


DMFCz rt, rd, sel 


Purpose: 
Move the contents of a coprocessor register to a general register. 


Description: 
The contents of the coprocessor z register specified by. the combination:of-rd and sel-are loaded into general 
register rt. Not all coprocessors or registers within a coprocessor see the sub-selection specified by the 
sel field. In those instances, the sel field must be set to zero ag 3 


Restrictions: Ran 
If the coprocessor enable bit for coprocessor z is zero in the Status register, access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor Unusable Exception. If the processor is 
running in Kernel Mode or Debug Mode, access to eoprecessor O:is enabled even if the CUO’bit is zero in the 
Status register. | 


A Reserved Instruction Exception is taken if acces: llowed to coprocessor z and DMFCz is not imple- 
mented for that coprocessor or if access to.64-bit operations is not enabled. 


we 


The results are UNPREDICTABLE ifc coproc 
if the coprocessor z register specified by rd and sel i 


z does.not contain a register as specified by rd and sel or 
bit register. 


Operation: 
if (Statuscy; = = 1)or . 
((z = 0) and ((Statusysy = 005) t (Debugpm = 
if (DMFCz Not Implemented) or é 
(not MIPS64OperationsEnabled()) 1 then 
InitiateReservedInstructionException 
endif 
data <- CPR[z,rd,sel] 
GPR[rt] <— data. 


= 1) or (Statuspyy = = 1) or (Statusgpy = = a then 


else -. : 
InitiateCoprocessorUnusableException(z) 
endif 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (access allowed, and DMFCz not implemented for this coprocessor or 
access to 64-bit operations is not enabled) 
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2.9.2.10 The DMTCz Instruction 


— Move to Coprocessor z_ foe 7 eee eee DMTCz 
26 25 20 16 15 11. 10 : 32 0 
COPz DMT 
0100zz 00101 
Format: 
DMTCz rt, rd MIPS64 


DMTCz tt, rd, sel 


Purpose: 
Move the contents of a general register to a coprocessor register. 


Description: 
The contents of general register rt are loaded into the coprocessor z register specified bythe combination of 
rd and sel. Not all coprocessors or registers within a coprocessor care: the ig selection specified. by the 


Sel field. In those instances, the sel field must be set to zero. 


Restrictions: : 
If the coprocessor enable bit for coprocessor z is zero in the. oon register, access to this coprocessor is not 


allowed, and execution of this instruction results in a Coprocessor Unusable Exception.:If the processor is 
running in Kernel Mode or Debug Mode, access to hs or Oi Is enabled even if the CUO bit is zero in the 


Status register. 


A Reserved Instruction Exception is taken if acce _allowed to coprocessor z and DMTCz is not imple- 


Operation: 
if (Statuscy, = 1)or | 
((z = 0) and ((Statusgsy= 002) ir (De DoE = = 1) or pune. = = 1) or (Statusgry = = 1))) then 

if (DMTCz Not Implemented) or 

(not MIPS64OperationsEnabled()) the 

InitiateReservedInstructionException 

endif 
data <—- GPR[rt] 
CPR[z,rd,sel] <— data 


else : 
InitiateCoprocessorUnusableException(z) 


endif 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (access allowed, and DMTCz not implemented for this coprocessor or 


access to 64-bit operations is not enabled) 
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2.9.2.11 The MADD Instruction 
Multiply and Add Word rw _ * bee . Ee = : - 2 a ee eee rene eee “MADD ad 


26 25 15 11 10 6 5 0 


SPEC2 0 0 MADD 
011100 00000 00000 000000 
5 5 6 
Format: 
MADD rs, rt MIPS64 
Purpose: 


Multiply two words and add the result to Hi, Lo 


Description: 
The 32-bit word value in GPR rs is multiplied by the 32-bit value in GPR rt, treating both operands as signed 
values, to produce a 64-bit result. The product is added to the 64-bit: concatenated values of H/3; 9 and 
LO3, 9, The most significant 32 bits of the result is sign-extended and written into HI and the least significant 
32 bits of the result is sign-extended and written into LO. No arithmetic exception occurs under any circum- 
stances. TByae a ouer 


Restrictions: ; j 
If GPRs rs or rt do not contain sign-extended 32-bit values wits ¢ 63. eve Sal then the results of the opera- 


tion are UNPREDICTABLE. 


Note that this instruction does not provide the cap lity of waiting direct to a target GPR. 


Operation: 
if NotWord Value(GPR[rs]) or NotWordValue( 
UNPREDICTABLE os 

endif 
temp < (HI31_0 || LO31.0) + (GPRIrts}31.0 0 GPR re 

HI < sign_extend(tempg3, 32) # “ye 

LO © sign_extend(temp3) 9) > 


Exceptions: 
None 


Implementation Note: 
Processors which implement a multiplier array which is not square (e.g., 32 x 16), and which therefore has 
_an operation latency which is data dependent, should assume that the shorter operand is in GPR rt. 


Programming Note: 
Where the size of the operands are known, software should place the shorter operand in GPR rt. This may 
reduce the latency of the instruction on those processors which implement data-dependent instruction laten- 


cies. 
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2.9.2.12 The MADDU Instruction 
Multiply and Add Unsigned Word toHiLo = 


31 26 25 21 20 16 15 11. 10 6 5 0 


SPEC2 0 0 MADDU 
000001 


011100 


Format: 
MADDwU rs, rt MIPS64 


Purpose: 
Multiply two unsigned words and add the result to Hi, Lo 


Description: 
The 32-bit word value in GPR rs As multiplied by the 32- bit value in GPR rt, treating. both operands as 


and LO3; 0. The most ane ay 32 bits of the result is sign- -extended arid written into HI and the least sig- 
nificant 32 bits of the result is sign-extended and written into LO. No arithm ic exception occurs under any 
circumstances. . 


Restrictions: i : 
If GPRs rs or rt do not contain sign-extended 32-bit values (bits 63. 31 
tion ae UNPREDICTABLE. 


ual), then the results of the opera- 


Note that this instruction does not provide the. capability of writing directly to a target GPR. 


Operation: 
if NotWordValue(GPR[rs]) or NotWordValue(G : 
UNPREDICTABLE | 
endif 
temp < (HIs3).0 [| LO3;..) + (OZ GPREIs, hie 
HI <— sign_extend(tempg¢3, 3 
LO € sign_extend(temp3, 


Exceptions: 
None 


Implementation Note: 
Processors which implement a multiplier array which is not square (e.g., 32 x 16), and which therefore has 
an operation latency. which is data dependent, should assume that the shorter operand is in GPR rt. 


Programming Note: 
Where the size of the operands are known, software should place the shorter operand in GPR rt. This may 
reduce the latency of the instruction on those processors which implement data-dependent instruction laten- 


cies. 
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2.9.2.13 The MFCz Instruction 
Move from Coprocessor Zz Bi Me Balke i, Bee eet ee INC? oe 


31 26 25 21 20 16 15 11. 10 3.2 0 


COPz 


01002z 


Format: 
MFCz rt, rd MIPS64 


MFCz _rt,rd, sel 


Purpose: 
Move the contents of a coprocessor register to a general register. 


Description: 
The contents of the least significant 32 bits of the coprocessor z register_specified by the combination of rd 
and sel are sign-extended and loaded into general register rt. Not all coprocessors or registers within a copro- 
cessor support the sub-selection specified by the sel field. In those instances, the sel field must be set to zero 


Restrictions: is 
If the coprocessor enable bit for coprocessor z is zero in the Status register, access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor Unusable Exception: If the processor is 
running in Kernel Mode or Debug Mode, access to oe 0i is enabled even if the CUO bit is zero in the 


Status register. 


A Reserved Instruction Exception is taken. if acc 


owed to coprocessor z and MFCz is not imple- 
mented for that coprocessor. ae 


The results are UNPREDICTABLE if f coproces does. not contain a register as specified by rd and sel. 


Operation: 
if (Statuscy, = 1) or 
((z = 0) and ((Statusysy = 002) or We y DM= a) or (Statusey, = 1) or (Statusgp, = 1))) then 
if (MFCz Not Implemented):then” 
InitiateReservedInstructionException” 
endif “ 
data <— CPR[z,rd,sel] 
GPR[rt] < sign_extend(data) 
else 


InitiateCoprocessorUnusableException(z) 
endif ‘ 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (access allowed, and MFCz not implemented for this coprocessor) 
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2.9.2.14 The MOVN.PS Instruction 
Floating Point Move Conditional on Not Zero es : hae ree .. a Ce MOVNPS 


26 25 20 16 15 11. 10 6 5 0 


COP1 rt fs MOVN 
010001 are 010011 
5 5 5 6 
Format: 
MOVN.PS fd, fs, rt MIPS64 
Purpose: 


To test a GPR then conditionally move an FP value. 


Description: 
-If the value in GPR rt is not equal to zero, then the value in FPR fs is seni in FPR fd. The source and des- 
tination are values in format PS. } 


~ If GPR rt contains zero, then FPR fs is not copied and FPR fd contains its previous value in format PS. If 
FPR fd did not contain a value either in format PS or previously: unused data from a load or move-to opera- 
tion that could be interpreted in format PS, then the value oe FPR fd becomes UNPREDICTABLE. 


The move is non-arithmetic; it causes no IEEE 754 exceptions os Ok 
Restrictions: 

The fields fs and fd must specify FPRs valid. for.operands of type PS; if they are not valid, the result is 

UNPREDICTABLE. 


The operand must be a value in format,PS 


1e result is UNPREDICTABLE and the value of 
FPR fs becomes UNPREDICTABLE. | wi 


Operation: 
if GPR[rt] # 0 then 
StoreFPR(fd, PS, ValueFPR(fs, PS) 
else 
StoreFPR(fd, PS, ValueFPR(fd 
endif 


Exceptions: 
Coprocessor Unusable Exception oe not allowed to coprocessor) 
Reserved Instruction Exception (access allowed, but 64-bit operations are not enabled or the ae single 
format is not implemented) 
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2.9.2.15 The MOVZ.PS Instruction 


Floating Point mere Comte on Zero. =e | a o a ee moe Sadie MOVZ.PS. | 
26 25 20 16 15 11. 10 6 5 0 
COP1 
010001 10 . 10 
5 5 5 6 
Format: 
MOVZ.PS fd, fs, rt MIPS64 
Purpose: 


To test a GPR then conditionally move an FP value. 


Description: 
If the value in GPR rt is equal to zero, then the value in FPR fs is placed 1 in FPR fd. The source and destina- 
tion are values in format PS. ay a 


If GPR rt is not zero, then FPR fs is not copied and FPR fd eoutias its previous value in format PS. If FPR 
fd did not contain a value either in format PS or previously ‘unused data from a load or move-to operation 
that could be interpreted in format PS, then the value of FPR fa becomes UNPREDICTABLE. : 


The move is non-arithmetic; it causes no IEEE 754 exceptions: cid | Se 

Restrictions: aN 
The fields fs and fd must specify FPRs valid for-operands of type PS; if they are not valid, the result is 
UNPREDICTABLE. ae 2 


Operation: 
if GPR[rt] = 0 then 
StoreFPR(fd, PS, ValucFPRIG PS)) 
else | 
StoreFPR(fd, PS, ValueFPR(fd, 'Ps)) 
endif 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
Reserved Instruction Exception (access allowed, but 64-bit operations are not enabled or the paired single 


format is not implemented) 


November 15, 1999 -35.- 


MIPS PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 | | MIPS64™ Specification 


2.9.2.16 The MSUB Instruction 


26 25 
SPEC2 MSUB 
011100 00000 eee 000100 
Format: 
MSUB -sts,tt MIPS64 
Purpose: 


Multiply two words and subtract the result from Hi, Lo 


Description: 
-The 32-bit word value in GPR rs is multiplied by the 32-bit value in GPR rt, treating both operands as signed 
values, to produce a 64-bit result. The product is subtracted from the 64-bit concatenated values of H13, 9 

and LO3; 9, The most significant 32 bits of the result is sign- -extended and written into HI and the least sig- 
nificant 32 bits of the result is sign-extended and written into LO. No: arithmetic exception occurs under any 
circumstances. 


Restrictions: : 3 
If GPRs rs or rt do not contain sign-extended 32-bit values (bits 63.31 equal), then the results of the opera- 
tion are UNPREDICTABLE. 


Note that this instruction does not provide the capability of writing directly to a target GPR. 


Operation: 
if NotWord Value(GPR[rs]) or NotW rdValue( 
UNPREDICTABLE 

endif 
temp < (HIs1,9 [| LO31,0) - (GPRIts}31,0 * * GPRI of . 
HI < sign_extend(tempg¢3. 32). 
LO € sign_extend(temp3; 9) 


Exceptions: 
None 


Implementation Note: 
Processors which implement a multiplier array which is not square (e.g., 32 x 16), and which therefore has 
an operation latency which is data dependent, should assume that the shorter operand is in GPR rt. 


Programming Note: 
Where the size of the operands are known, software should place the shorter operand in GPR rt. This may 
reduce the latency of the instruction on those processors which implement data-dependent instruction laten- 


cies. 
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2.9.2.17 The MSUBU Instruction 
Multiply eee Unsigned Word to Hi,Lo so “, Sa hap te inten . as - io ae * SUBU a 


Format: 
MSUBU rs, rt MIPS64 


Purpose: 
Multiply two unsigned words and subtract the result from Hi, Lo 


Description: 
The 32-bit word value in GPR rs is multiplied by the 32-bit value in GPR rt, treating both operands as 
unsigned values, to produce a 64-bit result. The product is subtracted-from.the 64-bit concatenated values of 
H13, 9 and LO3;. 9, The most significant 32 bits of the result is sign- -extended and written into H/ and the least 
significant 32 bits of the result is sign-extended and written into Lo. No arithmetic exception occurs under 
any circumstances. VERE 


Restrictions: 
tion are UNPREDICTABLE. 


Note that this instruction does not provide the capabili 


Operation: 
if NotWord Value(GPR[rs]) or NotWordValue(G 
UNPREDICTABLE Ee 
endif 


HI © sign_ extend(temp,3 we 
LO € sign_extend(temp3, 9) - 


Exceptions: 
None 


Implementation Note: 
Processors which implement a multiplier array which is not square (e.g., 32 x 16), and which therefore has 
an operation latency which is data dependent, should assume that the shorter operand is in GPR rt. 


Programming Note: 
Where the size of the operands are known, software should place the shorter operand in GPR rt. This may 
reduce the latency of the instruction on those processors which implement data-dependent instruction laten- 
cies. 
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2. ?. 2. i The nee Instruction 


26 25 20 16 15 11. 10 32 0 
COPz MT 
0100zz 00100 
Format: 
MTCz _tt,rd , MIPS64 


MTCz _ rt, rd, sel 


Purpose: 
Move the contents of a general register to a coprocessor register. 


Description: 
The contents of general register rt are loaded into the coprocessor z register specified by the combination of 
rd and sel. Not all coprocessors or registers within a coprocessor support the supselecton specified by the 
sel field. In those instances, the sel field must be set to zero. Deal : 


~ 


Restrictions: eae) 
If the coprocessor enable bit for coprocessor z is zero in the Status register, access to this coprocessor is not 
allowed, and execution of this instruction results in a Coprocessor Unusable Exception. If the processor is 
running in Kernel Mode or Debug Mode, access to coprocessor 01 is s enabled even if the CUO bit is zero in the 


Status register. 


A Réserved Instruction Exception is taken if access is allowed to coprocessor z and MTCz is not imple- 
mented for that coprocessor. 


For coprocessor 0, this instruction di 
by rd. and sel if that register is a 


Operation: 
if (Statuscy, = 1) or 
((z = O) and ((Statusysy = 005) Or (Debugpm = 
if (MTCz Not Implemented) then ° 
InitiateReservedInstructionException 
endif 
data <— GPRIrt] 
if (z = 0) and (Width(CPR[z,rd,sel]) = oe then 
CPR[z, rd,sel] ¢ data ~ 
else 
CPR[z,rd,sel] <— data3; 9 
endif 
else 
InitiateCoprocessorUnusableException(z) 
endif 


= 1) or (Statusex, = 1) or (Statusgp; = 1))) then 


Exceptions: 
Coprocessor Unusable Exception (Access not allowed to coprocessor) 
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Reserved Instruction Exception (access allowed, and MTCz not implemented for this coprocessor) 
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2.9.2.19 The MUL misituction 
Multiply Word to GPR \. . oe | Le : oe ‘ . ee, é 7 ae - & : “ ot _MUL fess ; 


MUL 


000010 


Format: 
MUL _ rd,rs, rt | MIPS64 


Purpose: 
Multiply two words write the result to a GPR 


Description: 
“The 32-bit word value in GPR rs is multiplied by the 32-bit value in GPR rt, treating both operands as signed 
values, to produce a 64-bit result. The least significant 32 bits of the product are written to GPR rd. The con- 
tents of H/ and LO are not defined after the operation. No arithmetic exception occurs. +. under any circum- 


ro 


“stances. 
Restrictions: : : 

If GPRs rs or rt do not contain sign-extended 32-bit values {pits 63.31 equal), then the: result of the opera- 

tion are UNPREDICTABLE. on a , 


Note that this instruction does not provide the capability SPeitin e result to the HI and LO registers. 


Operation: 

if NotWord Value(GPR[rs]) or NotWord Value(GPR[rt]) th 
UNPREDICTABLE 

endif 
temp <- GPR[rs]}31..9 * GPR[tt]31.0 
_GPR[rd] <— sign_extend(temp3, 9) 
HI < UNPREDICTABLE 
LO + UNPREDICTABLE | 


Exceptions: 
None 


iiiplementatiol Note: 
Processors which implement a multiplier array which i is not square (e.g., 32 x 16), and which therefore has 
an operation latency which is data dependent, should assume that the shorter operand is in GPR rt. 


Programming Note: re 
_ Where the size of the operands are known, software should place the shorter operand in GPR rt. This may 
reduce the latency of the instruction on those processors which implement data-dependent instruction laten- 


cies. 
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2.9.2.20 The PREF Instruction 
Prefetch | a. ae cere hae) Gthie te ot ee . PRER 3") 
31 26 25 21 20 16 15 0 


PREF 


110011 


Format: 
PREF hint, offset(base) MIPS IV 


Purpose: 
To move data between memory and cache 


Description: 
PREF adds the 16-bit signed offset to the contents of GPR base to form an effective byte address. The hint 


field supplies information about how the addressed data is to be manpulalee ss 


~ 


PREF enables the processor to take some action as specified by the: hint field, ‘to improve program perfor- 
mance. The action taken for a specific PREF instruction is both: ‘system. and context dependent. Any action, 
including doing at is permitted as long as it does not aks architecturally visible state or alter the 


movement Occurs. 


PREF never generates a memory oe 


Table 36: PREF hint field encodings 


Data Use and Desired PREF action 


Use: Prefetched data is expected to be read (not modified) 


Action: Fetch data as if for a load. 


Use: Prefetched data is expected to be stored or modified 


Action: Fetch data as if for a store. 


Reserved for future use - not available to implementations. 
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Table 36: PREF hint field encodings 


Data Use and Desired PREF action : 


Use: Prefetched data is expected to be read (not modified) 
5 


but not reused extensively; it “streams” through the cache 
store_streamed 


Action: Fetch data as if for a load and place it in the cache 
so that it does not displace data prefetched as “‘retained”’ 


Use: Prefetched data is expected to be stored or modified 
but not reused extensively; it “streams” through the cache 


Action: Fetch data as if for a store and place it in the cache 
so that it does not displace data prefetched as “retained” 


Use: Prefetched data is expected to be read (not modified) 
and reused extensively; it should be “retained” in the cache 


Action: Bah data as if fora load and 1 place it in the cache 
so that it is not displaced by data prefetched as “‘streamed”’ 


Use: Prefetched data is expected to be stored or modified 
and reused ces ha it should be “retained” in OF cache 


Action: Fetch data as if for a store and place it in die ciithe 
so that it is not displaned by at prefetched as “streamed” 


writeback_invalidate 
(also known as nudge) 


1¢ ependent use a 


Restrictions: 
None 


Operation: 
vAddr <— GPR[base] + sign_extend(offset) 
(pAddr, CCA) «+ AddressTranslation(vAddr, DATA, LOAD) 
Prefetch(CCA, pAddr, vAddr, DATA, hint) 


Exceptions: 
Prefetch does not take any TLB-related or address-related exceptions under any circumstances. 


Programming Notes: 
Prefetch cannot access a mapped location unless the translation for that location 1s present in the TLB. Loca- 
tions in memory pages that have not been accessed recently may not have translations in the TLB, so 
prefetch may not be effective for such locations. 
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Prefetch does not cause addressing exceptions. It does not cause an exception to prefetch using a pointer 
before the validity of the pointer is determined. 


Hint field encodings whose function is described as “‘streamed” or “retained” convey usage intent from soft- 
ware to hardware. Software should not assume that hardware will always prefetch data in an optimal way. If 
data is to be truly retained, software should use the Cache instruction to lock data into the cache. 


Implementation Notes: 
It is implementation dependent whether encodings of the hint field listed as “Implementation Dependent” or 
“Unimplemented” are treated as a NOP, or mapped to another valid encoding of the hint field. 


Hint field encodings whose function is described as “‘streamed” or “‘retained”’ convey usage intent from soft- 
ware to hardware. Processors should make an attempt to take this information into account when prefetching 
data, but are not obligated to do so. 


Processors should never implement the writeback_invalidate encoding of the hint field in such a way that the 
action moves data from memory hierarchy to the cache. This function should either take the action intended 
for the encoding (to schedule a possible writeback and une invalidation) or treat the function as a 
NOP. od ‘ 

“ee “Y 


It is implementation dependent whether a data watch is trig oe d by: a ch instruction whose address 
matches the Watch register address match conditions. The preferred eae is not to match on the 
prefetch instruction. A * ye | 


at 
BAe 
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2 ?.: 2 21 The ere peueuon 


26 25 15 11. 10 6 5 0 


COP1X index hint 0 PREFX 
010011 00000 001111 
5 6 | 
Format: 
PREFX hint, index(base) MIPS IV 
Purpose: 


To move data between memory and cache 


Description: 
PREFX adds the contents of GPR index to the contents of GPR base to form an effective Eyle address. The 
‘hint field supplies information about how the addressed data is to be pranipulase | 


The only functional difference between the PREF and PREFX instructions is. the ade oe mode imple- 
mented by the two. Refer to the PREF instruction description for all other details, including the encoding as 
“the hint field. 


Note, however, that the prefx instruction is only iaabier on n processors that jaipisnear floating point, and 
should only be generated by compilers in situations in which the corresponding load and storé indexed float- 
ing point instructions are generated. 


Restrictions: 
None 


Operation: 
if Sauscul= = Q) then 


Exceptions: 
Coprocessor Unusable Exception 
Prefetch does not take any TLB-related or address- related exceptions under any circumstances. 


Programming Notes: 
Refer to the corresponding section in the PREF instruction description. 


Implementation Notes: 
Refer to the corresponding section in the PREF instruction description. 
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2.9.2.22 The SSNOP Instruction 
Superscalar Inhibit NOP ~ fi ed bt 4 =a Saat shen te a SNP 


31 26 25 21 20 16 15 11 


SPECIAL 


000000 


Format: 
SSNOP MIPS32 


Purpose: 
Break superscalar issue on a superscalar processor 


Description: 
This instruction alters the instruction issue behavior on a superscalar processor by forcing the SSNOP 
instruction to single-issue. Notwithstanding implementation dependent issue rules, a processor must end the 
current instruction issue between the instruction previous to the SSNOP and the SSNOP. The SSNOP then 


issues alone in the next issue slot. 


.SSNOP is intended for use primarily to allow the programmer. control over CPO hazards by converting 
instructions into cycles in a superscalar processor. For example, to insert at least two cycles between an 
MTCO and an ERET, one would use the following sequence: - 


7 ae 


Restrictions: 
None 


Operation: 


Exceptions: 
None 
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2.9.3 Privileged Instructions 


2.9.3.1 The CACHE Instruction 


31 26 25 21 20 16 15 0 


CACHE 


101111 


Format: 
CACHE op, offset(base) MIPS64 


Purpose: 
ie perform the cache operation specified by op. 


Description: f 3 3, 
The 16-bit offset is sign-extended and added to the contents of the babe! register to foils an effective address. 
The effective address is used in one of three ways based on the operation to be pouounee and the type of 
cache as described in Table 37. | 


Table 37: Usage of Effective ies ate 


fat 2 


Operation 
Requires an 


haste Iti is implementation dependent whether the effective address 
or the translated’ physical address are used to index the cache. © 
Assuming that the total cache size in bytes is CS, the associativity 1s 
A, and the number of bytes per tag is BPT, the following calculations 
give the fields of the address which specify the way and the index: 
OffsetBit + Log2(BPT) = 

IndexBit — Log2(CS / A) 

WayBit < IndexBit + Ceiling(Log2(A)) 

Way < Addrwaysit-1..indexBit. 

Index <— AddrindexBit-1..OffsetBit 

For a direct-mapped cache, the Way calculation is ignored and the 
Index value fully specifies the cache tag. This is shown symbolically 
in Figure 4. 


November 15, 1999 - 46 - 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Figure 4: Usage of Address Fields to Select Index and Way 


IndexBit 


0 


A TLB Refill and TLB Invalid (both with cause code equal TLBL) exception can occur on any operation. 
For index operations (where the address is used to index the cache but need not match the cache tag) soft- 
ware should use unmapped addresses to avoid TLB exceptions. This instruction never causes TLB Modified 
exceptions nor TLB Refill exceptions with a cause code of TLBS nor data Watch exceptions. 


A Cache Error exception may occur as a byproduct of some operations performed by this instruction. For 
example, if a Writeback operation detects a cache or bus error during the processing of the operation, that 
error is reported via a Cache Error exception. 


An Address Error Exception (with cause code equal AdEL) may occur.if the effective address references a 
portion of the kernel address space which would normally result in such an ey Cepuott It is implementation 
dependent whether such an exception does occur. 3 


It is implementation dependent whether a data watch is triggered. by a-cache instruction whose address 
matches the Watch register address match conditions. The pegiontes implementation i is not to match on the 
cache instruction. . _ he 


Bits [17:16] of the instruction specify the cache on which biti the operation, as follows: 


cache operations, certain saecen must be ere on all processors, The remaining encodings are rec- 
ommended. saga 
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Table 39: Encoding of Bits [20:18] of the CACHE Instruction 


et the state of the cache block at the 
specified index to invalid. 


Effective 
Address 
Operand 


Type 


i Index Invalidate This required encoding may be used by Required 
software to invalidate the entire instruc- 
tion cache by stepping through all valid 
indices. 
Index Writeback For a write-back cache: If the state of the 
| Invalidate / Index cache block at the specified index is valid | Required 


Invalidate and dirty, write the block back to the 
memory address specified by the cache 
tag. After that operation is completed, set 
the state of the cache block to invalid. If 
the block is valid but not dirty, set the 
state of the block to inv 
Index Writeback aa 
Invalidate / Index Fon a write- through cache: Set the state of 
Invalidate the cache block. at the Spee index to 


5, ~* 


Optional 


see 


Read the tag for the cache block at the 
ecified index into the TagLo and TagHi - 
CORO: registers. If the DataLo and DataHi © 
registers are implemented, also read the 
‘data corresponding to the byte index into 
the Datalo and DataHi registers. 


Index Load Tag Recommended 


The granularity and alignment of the data 
read into the DataLo and DataHi registers 
is implementation-dependent, but is typi- 
cally the result of an aligned access to the 
cache, ignoring the appropriate low-order 
bits of the byte index. 
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Table 39: Encoding of Bits [20:18] of the CACHE Instruction 


Write the tag tor the cache block at the 
Index Store Tag Index Required 


specified index from the TagLo and TagHi 


COPO registers. 
Required 


Effective 
Address 
Operand 


Type 


This required encoding may be used by 
software to initialize the entire instruction 
of data caches by stepping through all 
valid indices. Doing so requires that the 
TagLo and TagHi registers associated with 
the cache be initialized first. | 
Available for ae dependent 
operation gees 

If the cache block contains ihe specified 


address, set the state of the cache block to | (Instruction 
invalid. Bd eee teas Cache Encod- 
I,D Hit Invalidate Address Pe ing Only), : 
100 This required Sacodine may ie used by ...| Recom- 
software to invalidate a range of addresses | mended other- 
from the instruction cache by stepping wise 
S,T mrougr the address : rape by the line size 
Address 7 Fill the care from the specified address 
Hit Writeback For a write-back cache: If the cache block 
Invalidate/Hit | Address  } contains the 5] Required 
Invalidate Bs | 3 i} 
aid. If the block is valid but not dirty, 
et the state of the block to invalid. - 
101 “d 
For a write-through cache: If the cache . 
Hit Writeback IEA | : 
af block contains the specified address, set 
S,T | Invalidate / Hit | Address") the state of the cache block to invalid. | OPtonal 
Invalidate ; 
This required encoding may be used by 
software to invalidate a range of addresses 
from the data cache by stepping through 
the address range by the line size of the 
cache. 
If the cache block contains the specified 
address and it is valid and dirty, write the 
contents back to memory. After the opera- 
110 tion 1s completed, leave the state of the 
PIP WALD AEE nadie’. line valid, but clear the dirty state. For a Opnona 
write-through cache, this operation may 
be treated as a nop. 
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Table 39: Encoding of Bits [20:18] of the CACHE Instruction 


Effective 
Address 
Operand 


Type 


Operation Compliance 


Code | Caches - Name 


does not contain the specifiec 
address, fill it from memory, performing a 
writeback if required, and set the state to 
valid and locked. If the cache already con- 
tains the specified address, set the state to 
locked. In set-associative or fully-associa- 
tive caches, the way selected on a fill from 
memory is implementation specific. 


The lock state may be cleared by execut- 

ing an Index Invalidate, Index Writeback 

Invalidate, Hit Invalidate, or Hit Write- 

back Invalidate operation to the locked 

line, or via an Index Store Tag operation 

to the line that clears the lock bit. Note 

that clearing the lock state via ‘Index Store ~ 
Fetch and Lock Address Tag is dependent on the implementation-_ ..| Recommended 

dependent cache tag and cache line orga- "| " 

nization, and that Index and Index Write- 

back Invalidate ‘operations are dependent 

cache line organization. Only Hit and 
Hit Writeback Invalidate operations are 
generally p rtable across implementa- 


It is implementation dependent whether a 
. locked line i is displaced as the result of an 
val invalidate or intervention that 
on the locked line. Software must not 
depend on the locked line remaining in 
the cache if an external invalidate or inter- 
vention would invalidate the line if it were 


Restrictions: 
Execution of this instruction is legal only if the processor is operating in Kernel Mode or Debug Mode, or if 
the CPO enable bit is set in the Status register. In other circumstances, a Coprocessor Unusable Exception is 
taken. 


The operation of this instruction is UNDEFINED for any operation/cache combination that is not imple- 
mented. 


The operation of this instruction is UNDEFINED for uncacheable addresses. 


November 15, 1999 - 50 - 


MIPS” PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Operation: 

if (Statuscyo = 1) or (Statusx sy= 002) or (Debugpyy = 1) or (Statuspx, = 1) or (Statusgr, = 1) then 
vAddr <- GPR[base] + sign_extend(offset) 
(pAddr, uncached) <~ AddressTranslation(vAddr, DataReadReference) 
CacheOp(op, vAddr, pAddr) 

else 
InitiateCoprocessorUnusableException(0) 

endif 


Exceptions: 
TLB Refill Exception. 
TLB Invalid Exception 
Coprocessor Unusable Exception 
Address Error Exception 
Cache Error Exception 
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2.9.3.2 The ERET Instruction | 
Exception Return eee or 2 aan oh - ee . :. : . ; | ; 4 7 2 8 nes _« ERET a 
31 26 25 24 0 


COPO 0 ERET 


010000 | 000 0000 0000 0000 0000 011000 


Format: 
ERET MIPS64 


Purpose: 
Return from interrupt, exception, or error trap 


Description: 
ERET returns to the interrupted instruction at the completion of interrupt, exception, or error trap process- 
-ing. ERET does not execute the next instruction (i.e., it has no sar soe, 3 


Restrictions: : ? 
The operation of the processor is UNDEFINED if an BRET is s placed in the detay slot a a branch or f jump 
_ instruction. 


An ERET placed between an LL and SC instruction will always cause the SC to fail. 


; nay 
ta 


This instruction is legal only if the processor is in Kernel Mode o or 7 Debug Mode, or if the CPO usable bit is 


set in the Status register. In other circumstances,execution of this instruction results in a Coprocessor Unus- 
able Exception. 


in the CPO state that could affect the fetch and decode 
such as changes to the effective ASID, user-mode 


state, and addressing mode. 


Operation: 
if (Statuscyo = 1) or (Status y= 
if Statuspp;, = 1 then : 
PC — ErrorEPC 
StatuSery <- 0 
else 
PC <— EPC 
Statusex, <— 0 
endif 
LLbit < 0 


005) or (Debug) = 1) or (Statusgx, = 1) or (Statuserr = 1) then» 


else : : 
InitiateCoprocessorUnusableException(0) 
endif 


Exceptions: 
Coprocessor Unusable Exception 
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2. 9.3.3 The TLBP Instruction 
‘Probe TLB for Matching Entry, Ao ty we : hoa : / a . Pe : 0) : | . a i: / ao : ye Ae e sen o By _TLBP i “ 


31 26 25 24 0 


COPO 0 TLBP 


010000 000 0000 0000 0000 0000 001000 


Format: 
TLBP MIPS64 


Purpose: 
Find a matching entry in the TLB. 


Description: 
The Index register is loaded with the index of the TLB entry whose contents match the contents of the 
EntryHi register. If no TLB entry matches, the high-order bit of the Index 


Restrictions: 
This instruction is legal only if the processor is in Kernel Mode or Debug Mode, or if the CPO usable bit is 
set in the Status register. In other circumstances, execution of this instruction results in a a Unus- 


able Exception. 


U, ‘the operation of this instruction is UNDE- 
struction Exception. 


For processors that do not include the standard TLB I 
FINED. However, the preferred implementation isaR 


Operation: 
if (Statuscyg = 1) or (Statusn sg y= 003) or 
Index < 1 || UNPREDICTABLE? 
for i in 0... TLBEntries-1 ‘ 
if (TLB[ilp = EntryHig) and 
((TLB[i]ypy> and not CTLBIt Mask 
(EntryHiypyz and not (TE 
(TLB[iJg or (TLB[ 
Index <1 
endif 
endfor 


1) or (Statusep; = 1) then 


else * 
InitiateCoprocessorUnusableException(0) 
endif 


Exceptions: 
Coprocessor Unusable Exception 
Reserved Instruction Exception (if not implemented) 
Machine Check (if implemented and a TLB shutdown condition is detected on a TLB read) 
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2.9.3.4 The TLBR Instruction 
Read Indexed TLB Entry Ss 


31 26 25 24 0 


COPO 0 TLBR 


010000 000 0000 0000 0000 0000 000001 


Format: 
TLBR | MIPS64 


Purpose: 
Read an entry from the TLB. 


Description: 
The EntryHi, EntryLo0, EntryLol, and PageMask registers are loaded with the contents of the TLB entry 
pointed to by the Index register. Note that the value written to the Entr r vidi, ae and EntryLol registers 


The value returned in the VPN2 field of the EntryHi register ma 
ing to the one bits in the Mask field of the TLB entry (thé:lez 
the least significant bit of the Mask field). It is implement: 
served or zeroed atter a TLB entry is written and then ae 


entry (the least erifcmt bit of PFN 
lementation dependent whether these 


Restrictions: | 
This instruction is legal only if the proce 
set in the Status register. In othe 
able Exception. 


The operation is UNDEFINE 
of TLB entries in the processor. 


For processors that do not include the standard TLB MMU, the operation of this instruction is UNDE- 
FINED. However, the preferred implementation is a Reserved Instruction Exception. 
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Operation: 
i < Index 
if (Statuscyo = 1) or (Statusx syj= 002) or (Debugpy = 1) or (Statusex, = 1) or (Statusgp, = 1) then 
if i> TLBEntries -1 then 
UNDEFINED 
endif 
PageMasky,., <- TLB[i Mask 
EntryHi <— TLB[i], || OF! | 
(TLB[i}ypn2 and not TLB[i]yas,) ||. # Masking of VPN2 is implementation dependent 
O° || TLBLiJasw 
EntryLol — OF"! (TLB[ilpen; and not TLB[i}vack) || # Masking of PFN is implementation dependent 
TLB{i}c: || TLB[i]p, || TLBLily, || TLB[ilg 
EntryLo0 — OF! || (TLBfi]peno and not TLB[i]yrask) || # Masking of PFN is implementation dependent 
TLBlilco || TLBE]po || TLBLi]vo || TLB[ilg 
else 


InitiateCoprocessorUnusableException(0) 
endif 


Exceptions: 
Coprocessor Unusable Exception 
Reserved Instruction Exception (if not implemented) 
Machine Check (if implemented and a TLB shutdown conditio is detected ona TLB read) ” 
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2.9.3.5 The TLBWI penenoe 
Write Indexed TLB Entry . 


31 26 25 24 0 


COPO 0 TLBWI 


010000. | 000 0000 0000 0000 0000 000010 


Format: 
TLBWI MIPS64 


Purpose: 
Write a TLB entry indexed by the Index register. 


Description: 
The TLB entry pointed to by the Jndex register is written from the contents of the EntryHi, EntryLo0, 
EntryLol, and PageMask registers. The information written to the TLB ary ao be different from that in 
the EntryHi, EntryLo0, and EntryLo] registers, in that: ae 4 
* The value written to the VPN2 field of the TLB entry may have ‘hse bits set to zero corresponding to 

the one bits in the Mask field of the PageMask register (the least significa bit of VPN2 corresponds to. 
the least significant bit of the Mask field). It is Baa pendent whether these bits are pre- 
served or zeroed during a TLB write. 


e The value written to the PFNO and PFN1 fields of the TL entry may have those bits: set'to zero corre- 
sponding to the one bits in the Mask field of PageMask register (the least significant bit of PFN corre- 
sponds to the least significant bit of the Mask field). tis impl 


ntation dependent whether these bits 


are preserved or zeroed during a TLB w 
¢ The single G bit in the TLB entry is s 
EntryLol registers. 


logical AND of the G bits in the EntryLo0 and 


Restrictions: ; 
This instruction is legal only if the ‘proce S 
set in the Status register. In other. circ 
able Exception. 


in Kernel Mode or Debug Mode, or if the CPO usable bit is 
=xecution of this instruction results in a Coprocessor Unus- 


The operation is UNDEFINED 
of TLB entries in the processor. 


f the Index register are greater than or equal to the number 


For processors that do not include the standard TLB MMU, the operation of this instruction is UNDE- 
FINED. However, the preferred implementation is a Reserved Instruction Exception. 
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Operation: 

i < Index 

if (Statuscyo = 1) or (Statusx sy = 002) or (Debugpyy = 1) or (Statusgxy, = 1) or (Statuspry = 1) then 
if i > TLBEntries -1 then 

UNDEFINED 

endif 
TLB[t} mask <- PageMaskyyax 
TLB[iJp — EntryHip 
TLB[i]vpn2 <- EntryHiypy2 and not PageMasky,,,  # Masking of VPN2 is implementation dependent 
TLB[i] asip < EntryHi,sip 
TLB[iJg < EntryLolg and EntryLo0, 
TLB[i]pen; <— EntryLolpry and not PageMasky,,.,  # Masking of PFN is implementation dependent 
TLB[iJc; < EntryLole¢ 
TLB[i]p; < EntryLolp 
TLB[i]y; <— EntryLoly 
TLBL[i]peno <— EntryLoOpen and not PageMasky,,,,  # Masking of PFN is implementation dependent 
TLB[i]cg < EntryLo0c gee 
TLB[i]po <— EntryLo0p 
TLB[i]yo < EntryLoOy ~ 


else 
InitiateCoprocessorUnusableException(0) 
endif 


Exceptions: 
Coprocessor Unusable Exception ae 
Reserved Instruction Exception (if not implemente 
Machine Check (if implemented and a TLB shutdc 


ion is detected on a TLB write) 
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2. 9.3.6 The TLBWR Instruction 
| Write Random TLB Entry 


31 26 25 24 0 


COPO 


0 
010000 000 0000 0000 0000 0000 000110 


Format: 
TLBWR MIPS64 


Purpose: 
Write a TLB entry indexed by the Random register. 


Description: 
The TLB entry pointed to by the Random register iS written from we contents of the EntryHi, EntryLo0, 


the EniryHi EntryLo0, and EpsryEo! registers, in that: fy a 

«The value written to the VPN2 field of the TLB entry may rm 4 bits S 
the one bits in the Mask field of the PageMask register (the least sienific 
the least significant bit of the Mask field). It is implementaitig 

| served or zeroed duringaTLBwrite. <4 

¢ The value written to the PFNO and PFN] fields of the TLB -entry may ae those bits set'to zero corre- 
sponding to the one bits in the Mask field of PageMask register (the least significant bit of PFN corre- 
sponds to the least significant bit of the Mask field). It is imp ntation dependent whether these bits 
are preserved or zeroed during a TLB write. 

e The single G bit in the TLB entry is sé 
EntryLo1I registers. 


t to iene Coneeoondine to 
sant bit of VPN2 corresponds to- 
pendent whether these bits are pre- 


logical AND of the G bits in the EntryLoO and 


Restrictions: : 
ernel Mode or Debug Mode, or if the CPO usable bit is 
set in the Status register. In omer e circumst ces execut n of this instruction results in a Coprocessor Unus- 
able Exception. 


d TLB MMU, the operation of this instruction is UNDE- 
entation is a Reserved Instruction Exception. 


For processors that do not in 
FINED. However, the preferred in 
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Operation: 
i + Random 
if (Statuscyp = 1) or (Statusp gy= 003) or (Debugpy = 1) or (Statuspy, = 1) or (Statusgp, = 1) then 
TLB[i] ask <- PageMaskyy, <x 
TLB[i]y < EntryHipg 
TLB[ilypn2 <— EntryHiypyo and not PageMasky,,  # Masking of VPN2 is implementation dependent 
TLB[i]asip < EntryHiasip 
TLB[i]g <— EntryLolg and EntryLo0g 7 
TLB[i] pen; <— EntryLol ppy and not PageMasky,,,. # Masking of PFN is implementation dependent 
TLB[iJc; < EntryLole 
TLB[i]p; <— EntryLolp 
TLB[i]y,; < EntryLoly 
TLB[it]ppno <- EntryLoOpen and not PageMasky,,,  # Masking of PFN is implementation dependent 
TLB[i]eg <— EntryLo0c¢ 
TLB[il]p9 < EntryLo0p 
TLB[i}y9 < EntryLoOy 
else 


InitiateCoprocessorUnusableException(0) 
endif 


Exceptions: 
Coprocessor Unusable Exception 
Reserved Instruction Exception (if not implemented) 
Machine Check (if implemented and a TLB shutdown’ 


detected on a TLB write) 
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2.9.3.7 The WAIT Instruction 
"Enter Standby Mode eee 


31 26 25 24 | 0 


COPO | WAIT 


010000 Implementation-Dependent Information 100000 


Format: 
WAIT MIPS64 


Purpose: 
Wait for Event 


Description: 
«Ehe WAIT instruction ose an implementation- dependent eee usually involving a lower power 


The assertion of any reset or NMI signal (if sked by EJTAG) must restart the pipeline and the corre- 


sponding exception must be taken. 


Restrictions: : 
.. The operation of the PROSE is. wait instruction is placed in the delay slot of a branch or 
a ny | oe 

in Kernel Mode or Debug Mode, or if the. CPO usable bit is 

, execution of this instruction results in a Coprocessor Unus- 


This instruction is legal only if 
set in the Status register. In other circumstanc: 
‘able Exception. 


Operation: 
if (Statuscqjp = 1) or (Statuspgy= 002) or (Debugpyy = 1) or (Statusgxy, = 1) or (StAtUSERL = = 1) then 
Enter implementation dependent lower power mode | 
else 
fii CoprosessorUmucasleexcepdon(O): 
endif 


Exceptions: 
Coprocessor Unusable Exception 
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3. Floating Point Control Registers 


Although all five floating point control registers are included in the MIPS RISC Architecture documentation for the 
MIPS V ISA, several changes are included in MIPS64. As such, the registers are described below. Refer to the MIPS 
RISC Architecture documentation for a full description of the MIPS Floating Point Architecture. 


3.0.1 Floating Point Implementation Register (CP1 Register 0) 


The Floating Point Implementation Register (FIR) is a 32-bit read-only register that contains information identifying 
the capabilities of the floating point unit, the floating point processor identification, and the revision level of the float- 
ing point unit. Figure 5 shows the format of the FIR register; Table 40 describes the F/R register fields. 


Figure 5: FIR Register Format 


31 20 19 18 17 16 15 8 7 0 


ee 


Table 40: FIR Register Field Descriptions * 


Fields 


_ Description s 
Name EN 


7 _ 
PT 


Proces- 15:8 
sorID 
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: | ee Sa Compliance 


Indicates that the MIPS-3D A 
0: MIPS-3D not implemente 
1: MIPS-3D implemented 


Indicates that the paired 'singl 
point data type and instructions. 
0: PS floating not imple 


Preset | Required 


1: D floating implemented 


Indicates that the single-precision (S) floating 
point data type and instructions are implemented: 
0: S floating not implemented 

1: S floating implemented 


Required 


Preset Required 


Identifies the floating point processor. This value 
should normally match the corresponding field of 
the PRId CPO register unless there are different 
floating point implementations used by a single 
CPU. 
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Table 40: FIR Register Field Descriptions 


j Name | Bits i 
Name 
7 T= 


3.0.2 Floating Point Control and Status Register (CP1 Register 31) 


The Floating Point Control and Status Register (FCSR) is a 32-bit register that controls the operation of the floating 
point unit. Access to FCSR is not privileged; it can be read or written by any program that has access to the floating 
point unit (via the coprocessor enables in the Status register). Figure 6 shows the format of the FCSR register; 
Table 41 describes the FCSR register fields. : 


Description 


Specifies the revision number of the floating 
point unit. This field allows software to distin- 
guish between one revision and another of the. 
same floating point processor type. If this field is 
not implemented, it must read as zero. 


Figure 6: FCSR Register Format | 


25 24 23 22 = 21 20 


Fields Read/ 


Write Reset State | Compliance 
Name Bits ‘ | “ 


Undefined | Required 


vious MIPS ISAs, the ECC bits are separated into 
two, non-contiguous fields. 


Flush to Zero. When FS is one, denormalized | | Undefined Required 
results are flushed to zero instead of causing an ae 
Unimplemented Operation exception. It is imple- 

mentation dependent whether denormalized 

operand values are flushed to zero before the 

operation is carried out. 


Available to control implementation dependent R/W Undefined Optional 
features of the floating point unit. If these bits are | 

not implemented, they must be ignored on write 

and read as zero. 
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Table 41: FCSR Register Field Descriptions 


Fields Read/ 
Description 5 Reset State | Compliance 
: Write 
Name Bits 


20:18 | Reserved for future use; Must be written as zero; Reserved 
returns zero on read. 


Cause 17:12 | Cause bits. These bits indicate the exception con- Undefined 


ditions that arise during execution of an FPU 
Required 


arithmetic instruction. A bit is set to 1 if the cor- 
responding exception condition arises during the 
execution of an instruction and ts set to 0 other- 
wise. By reading the registers, the exception con- 
dition caused by the preceding FPU arithmetic 
instruction can be determined. 


Refer to Table 42 for the meaning of each bit. 


Enable bits. These bits control whether or not a 
trap is taken when an IEEE exception condition 
occurs for any of the five conditions. The trap 


Enables 11:7 


| 
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Undefined Required 


tions that have occurred for complet 1 instruc- 
tions since the flag was.Jast reset by software. ~ 
an yn raises an IEEE 


exception conditi 
Floating Point Exception. (i 


off), the corresponding bi 
set, while the others remain unchanged. Arith- 
metic operations that result in a Floating Point 
Exception (i.e., the Enable bit was on) do not 

update the Flag bits. | 


This field is never reset by hardware and must be 
explicitly reset by software. 


Refer to Table 42 for the meaning of each bit. 
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Table 41: FCSR Register Field Descriptions 


Fields | ap 
Description : Reset State | Compliance 
: Write 
ete fe , 


RM 1:0 Rounding mode. This field indicates the round- R/W Undefined Required. 
ing mode used for most floating point operations 
(some operations use a specific rounding mode). |._ | 
Refer to Table 43 for the meaning of the encod- 
ings of this field. 


Table 42: Cause, Enable, and Flag Bit Definitions 


Unimplemented Operation (this bit exis only in 
the Cause field) 


Invalid Operations 


; 4 : ee Sa : : : 
Pe _ | Divide by Zero a, . 7 
: BS 


Overflow 


Underflow 


Table 43: ding Mode Definitions ae ee 


RM Field 


-Meaning --- =: © 
Encoding pee 3 


RN - Round to N 


Rounds the result to the nearest representable value. When two representable values are 
equally near, the result is rounded to the value whose least significant bit is zero (that is, 
even) 


RZ - Round Toward Zero 


Rounds the result to the value closest to but not greater than in magnitude than the 
result. 


RP - Round Towards Plus Infinity 


Rounds the result to the value closest to but not less than the result. 
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Table 43: Rounding Mode Definitions 


RM Field ee 
Encoding 8 


RM - Round Towards Minus Infinity 


Rounds the result to the value closest to but not greater than the result. 


3.0.3 Floating Point Condition Codes Register (CP1 Register 25) 


The Floating Point Condition Codes Register (FCCR) is an alternative way to read and write the floating point condi- 


tion code values that also appear in FCSR. Unlike FCSR, all eight FCC bits are contiguous in FCCR. Figure 7 shows 
the format of the FCCR register; Table 44 describes the FCCR register fields. 


Figure 7: FCCR Register Format 


id , | baited =“ 


3.0.4 Floating Point Exceptions Register (CPI Register 26) 


The Floating Point Exceptions Register HEX. ernative way to read aa write the Cause and \d Flags fields that 
also appear in FCSR. Figure 8 shows the ormat of the FEXR register; Table 45 describes the FEXR register fields. 
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Figure 8: FEXR Register Format 


31 18 17 12 11 7 6 21 O 


17 16-15 14 13 12 - 6 5 4 3. 2 


Table 45: FEXR Register Field Descriptions 


wi A 
Must be written as zero; returns zero on read 0 et 


Cause bits. Refer to the description of this field in 
the FCSR register. .. & 


a 


that also appear in FCSR. Figure 9 shows the for 
fields. 


Reset State. Compliance 


sme [oe 
31:12, | Must be written as zero; returns zero on read F Reseed 
6:3 
Enables 11:7 Enable bits. Refer to the description of this field Undefined Required 
in the FCSR register. 


FS 2 Flush to Zero bit. Refer to the description of this R/W Undefined Required 
field in the FCSR register. 
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Table 46: FENR Register Field Descriptions 


Fields Read/ 
Description : Reset State | Compliance 
Name | Bits | we 

Name 


RM 1:0 Rounding mode. Refer to the description of this R/W Undefined Required 
field in the FCSR register. 
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4. The MIPS64 Privileged Resource Architecture 


4.1 Introduction 


The MIPS64 Privileged Resource Architecture (PRA) is a set of environments and capabilities on which the Instruc- 
tion Set Architecture operates. The effects of some components of the PRA are user-visible, for instance, the virtual 
memory layout. Many other components are visible only to the operating system kernel and to systems programmers. 
The PRA provides the mechanisms necessary to manage the resources of the CPU: virtual memory, caches, excep- 
tions and user contexts. This chapter describes these mechanisms. 


4.2 Compliance 


Features described as Required in this document are required of all processors claiming compatibility with the 
MIPS64 Architecture. Features described as Recommended should be implemented unless there is an overriding need 
not to do'so. Features described as Optional provide a standardization of features that may or may not be appropriate 
for a particular MIPS processor implementation. If such a feature is implemented, it must be implemented as 
described in this document if a processor claims Sasa with the ee 7. ae 


4.3 The MIPS Coprocessor Model 


The MIPS ISA provides for up to 4 coprocessors. A coprac 
sharing the instruction fetch and execution control logic of 
cessor and the floating point unit are standard p 
ments. Coprocessors ar are generally optional, with, 


d.are specified as such in the architecture docu- 
Q, the system coprocessor, is required. CPO is the 
full control of the processor state and modes. 


management, scheduling, and control 2 cri ica oe The interface to CPO is iouen various pete 
encoded with the COPO opcode, including th ity move data to and from the CPO registers, and specific func- 
tions that modify CPO state. The CPO registers and. the interaction with them make up much of the Privileged 
Resource Architecture. 


4.3.2 CP0 Register Summary 


Table 47 lists the CPO registers in numerical order. The individual registers are described later in this document. If the 
compliance level is qualified (e.g., “Required (TLB MMU)”), it applies only if the qualifying condition is true. The 
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Sel column indicates the value to be used in the field of the same name in the MFCO and MTCO instructions. 


Table 47: Coprocessor 0 Registers in Numerical Order 


Register Sel Register Rineiiox Rerevende Compliance 
Number Name Level 


Index into the TLB array Section 4.9.1 
on page 105 


Required 
(TLB MMU); 
Optional 

(others) 


Index 


Random Randomly generated index into the TLB Section 4.9.2 Required 
array on page 106 (TLB MMU); 
Optional 


(others) 


EntryLoO Low-order portion of the TLB entry for Section 4.9.3 Required 
even-numbered virtual pages {20 (TLB MMU); 
ae Optional 
(others) 


EntryLol Low-order portion of the TLB entry ‘ Required (TLB - 
odd-numbered virtual pages : _on page 107 MMU); 
Hd, ee - Optional (oth- 


ers) 


Context Section 4.9.4 Required 
>] on page 110 (TLB MMU); 
; Optional 
(others) 


PageMask | Control for varia Section 4.9.5 Required 
entries ~= on page 111 (TLB MMU); 
Optional 


(others) 


)-- | Section 4.9.6 ~-| Required 
on page 112 (TLB MMU); 
Optional 


(others) 


rene 


all Reserved for future extensions 


a 
a 


BadVAddr | Reports the address for the most recent Section 4.9.7 Required 
. | address-related exception on page 113 
ount Processor cycle count Section 4.9.8 Required 
on page 114 : 


High-order portion of the TLB entry Section 4.9.9 Required 
on page 114 (TLB MMU); 


QD 


EntryHi 


Optional 
(others) 


Compare Timer interrupt control Section 4.9.10 | Required 
on page 116 
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Table 47: Coprocessor 0 Registers in Numerical Order 


Register Sel Register Pancien Repivence Compliance 
Number Name Level 
12 Status Processor status and control Section 4.9.11 | Required i an 
on page 116 
13 Cause Cause of last general exception Section 4.9.12 | Required 
on page 123 
14 EPC Program counter at last exception Section 4.9.13 | Required 
on page 126 
15 PRId Processor identification and revision Section 4.9.14 | Required 
on page 127 
oa Config Configuration register Section 4.9.15 | Required 
é on page 128 | 
Config! Configuration register | a Required 


2 ee 
22 | adil 


Optional : 


Required 
(64-bit TLB 
MMU) 
Optional — 
(Others) ~ 


Section 4.9.21 | Implementation- 
on page 136 Dependent 
EJTAG Speci- | Optional 
fication 
24 DEPC Program counter at last EJTAG debug — | EJTAG Speci- | Optional 
| ' | exception | | fication 
; ; | 25 O-n | PerfCnt Performance counter interface Section 4.9.24 | Recommended 
7 on page 137 
26 ErrCtl Parity/ECC error control and status Section 4.9.25 | Optional 
on page 140 
27 0-3 | CacheErr Cache parity error control and status Section 4.9.26 | Optional 
| on page 140 
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Load linked address 


— Sesian 4.9.18. 
on page aa 


Watchpoint address 


Section 4.9.19 
on page 134 


Section 4.9.20 
on page 135 


ssing Page Tabl Context 


Extended Addi 


Reserved for future extensions...» . - 


entation dependent 


Debug EJTAG Debug register 
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Sel meee Function Reference Soraplance 
Name Level 
TagLo Low-order portion of cache tag interface Section 4.9.27 | Required 
on page 142 (Cache) 
1 DataLo Low-order portion of cache data interface | 4.9.28 0n page | Optional 
143 
TagHi High-order portion of cache tag interface | Section 4.9.29 | Required 
on page 143 (Cache) 
l DataHi High-order portion of cache data interface | 4.9.30 on page Optional 
144 
ErrorEPC Program counter at last error Section 4.9.31 | Required 
on page 144 


Register 
Number 


4.4.1 Debug Mode 


For processors that implement EJTAG, the processor is operating in Debug Mode if the DM bit in the Debug register 
is a one. If the processor is running in Debug Mode, it has full access to all resources that are available to Kernel 
Mode operation. | 


4.4.2 Kernel Mode 


The processor is operating in Kernel Mode when the DM bit in the Debug register is a zero (if the processor imple- 
ments Debug Mode), and any of the following three conditions is true: 

e¢ The KSU field in the Status register contains 00, 

¢ The EXL bit in the Status register is one 

« The ERL bit in the Status register is one 


The processor enters Kernel Mode at power-up, or as the result of an interrupt, exception, or error. The processor 
leaves Kernel Mode and enters User Mode or Supervisor Mode when all of the previous three conditions are false, 
usually as the result of an ERET instruction. 
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4.4.3 Supervisor Mode 


The processor is operating in Supervisor Mode (if that optional mode is implemented by the processor) when all of 
the following conditions are true: | 


¢ The DM bit in the Debug register is a zero (if the processor implements Debug Mode) 
e The KSU field in the Status register contains 01, 


¢ The EXL and ERL bits in the Status register are both zero 


4.4.4 User Mode 


The processor is operating in User Mode when all of the following conditions are true: 


¢ The DM bit in the Debug register is a zero (if the processor implements Debug Mode) 
* The KSU field in the Status register contains 105 


¢ The EXL and ERL bits in the Status register are both zero 


4.5 Other Modes 


|—6«4wS. - 64- bit Address Enable 


° A rises reference to a kernel address space occurs and the KX bit in 
e A legal reference to a supervisor address space occurs and t 
e A legal reference to a user address space occurs and the lt 


e Status register is a one. 
in the Status eee is aone 


address space made while the processor is operating 
the KX bit. : 


An attempt to reference a 64-bit address space 


) determined by the 64-bit address enable.. If 64-bit 
is used. If 64-bit addresses are enabled for the ref- 
erence, the XTLB Refill Vector is used. 


4.5.2 64- -bit ‘Cini Enab 


Instructions that perform 64-bit operations are | er any of the following conditions: 


° The processor is operating in Kernel Mode 
e The PX bit in the Status register is a one 
e The processor is operating in User Mode, as described above, and the UX bit in the Status register is a one. 


, Supervisor Mode, or Debug Mode, as described above. 


An attempt to execute an instruction which performs 64-bit operations when such instructions are not enabled results 
ina Reserved Instruction Exception. : 


4.5.3 64-bit FPR Enable 


Access to 64-bit FPRs is controlled by the FR bit in the Status register. If the FR bit is one, the FPRs are interpreted as 
32 64-bit registers that may contain any data type. If the FR bit is zero, the FPRs are interpreted as 32 32-bit registers, 
any of which may contain a 32-bit data type (W, S). In this case, 64-bit data types are contained in even-odd pairs of 
registers. 


The operation of the processor is UNPREDICTABLE under any of the following conditions: 
° The FR bit is a zero and an odd register is referenced by an instruction whose datatype is 64-bits 
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¢ The FR bit is a zero and a floating point instruction is executed whose data type is L or PS 
¢ 64-bit operations are not enabled, the FR bit is a one, and an instruction references the floating point regis- 
ters. 


4.6 Virtual Memory 


4.6.1 Terminology 


4.6.1.1 Address Space 


An Address Space is the range of all possible addresses that can be generated for a particular addressing mode. There 
is one 64-bit Address Space and one 32-bit Compatibility Address Space that is mapped into a subset of the 64-bit 
Address Space. 


4.6.1.2 Segment and Segment Size (SEGBITS) 


A Segment is a defined subset of an Address Space that has self-consistent reference and access behavior. A 32-bit 


Compatibility Segment is part of the 32-bit Compatibility Address Space. and ‘is either 2°? o¢: 2?) bytes in size, 


depending on the specific Segment. A 64-bit Segment is part of the 64-bit Address Space and is no larger than 2° 
bytes in size, but may be smaller on an implementation dependent basis.’ The symbol SEGBITS is used to represent 


the actual number of bits implemented in each 64-bit Segment. As such, if 40 virtual address bits were implemented, 


the actual size of the Segment would be QrHCeHS 90 bytes. 


4.6.1.3 Physical Address Size (PABITS) 


The number of physical address bits implemented is 


sented by the symbol PABITS. As such, if 36 physical 
5PABITS _ 736 


address bits were implemented, the size of the physi > would | bytes. 


4.6.2 Virtual Address Spaces 
With support for 64-bit operations and addre: 


932 


{IPS32 processors, a 2°*-byte eeu poate’ 


sign extension of bit 31. The at lit Space is smiley sub- aided into Serine selected By bits 
31:29 of the virtual address. Figure 10 shows the layout of the Address Spaces, including the Compatibility Address 
Space and the segmentation of each Address Space. 
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Figure 10: Virtual Address Spaces 


64-bit Virtual Memory Address Space 32-bit Compatibility Address Space 

OxFFFF FFFF FFFF FFFF 
kseg3 

OxFFFF FFFF E000 00000 


Kernel 
Mapped 


Kernel 
xkseg 


| Supervisor 
Mapped 


“ -gseg 


OxFFFF FFFF C000 0000 
Kernel 
0xC000 0000 0000 0000 Unmapped kseg | 


Uncached | 0xFFFF FFFF A000 0000 


Kernel Kernel kseg0 


ees d Unmapped 
phy Unmappe Pe OxFFFF FFFF 8000 0000 


0x8000 0000 0000 0000 


0x0000 0000 7FFF FFFF 


0x4000 0000 0000 0000 


0x0000 0000 0000 0000 ae Coad 0x0000 0000 0000 0000 


Each Segment of an Address Space is | ied as “Mapped” or “Unmapped”. A “Mapped” address is one that is 
translated ‘through the TLB or other memory ma 


é ment translation unit. An “Unmapped” address is one which is 
not translated through the TLB and which provides a window into the lowest portion of the physical address space, 
starting at physical address zero, and with a size corresponding to the size of the unmapped Segment. 


Additionally, the ksegl Segment is classified as “Uncached”. References to this Segment bypass all levels of the 
cache hierarchy and allow direct access to memory without any interference from the caches. 
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Table 48 lists the same information in tabular form. 


Table 48: Virtual Memory Address Spaces 


64-bit Reference 
Add- Legal Actual 


Segment Maximum Address ress Associated from Segment Segment 
Range Enable | with Mode Mode(s) Size Type 


OxFFFF FFFF FFFF FFFF 32-bit 
through Compati- 
OxFFFF FFFF E000 0000 bility 


Kernel Kernel 


32-bit 
Compati- 
bility 


Supervisor 
Kernel 


through 
OxFFFF FFFF C000 0000 


Supervisor 


OxFFFF FFFF BFFF FFFF 32-bit 
Il, kseg | through Kernel |... Kernel Compati- 
OxFFFF FFFF A000 0000 a bility 
OxFFFF FFFF 9FFF FFFF a ee | 32-bit 
kseg0 through eel | Compati- 
-OxFFFF FFFF 8000 0000 Ra 4 bility 


OxFFFF FFFF 7FFF FFFF | y ara eae 
xkseg through e 31 : 64-bit 
0xC000 0000 0000 0000 2°") bytes 


byte® 
regions 
within the 
= 762 


OxBFFF FFFF FFFF 


105 xkphys 


byte 


64-bit 
Segment 


Ol, oe ugh _ Supervisor ec ee 64-bit 
xksseg a Kernel bytes* 


xuseg User (QSEGBITS _ 
xsuseg through Supervisor 3] P 64-bit 
” xkuseg | 0x0000 0000 8000 0000 Kernel | 2° ) bytes 
? 0x0000 0000 7FFF FFFF User 32-bit 
through Supervisor | 23! bytes | Compati- 
0x0000 0000 0000 0000 Kernel bility 


a. See Section 4.6.1.2 on page 73 and Section 4.6.1.3 on page 73 for an explanation of the symbols SEGBITS and 
PABITS, respectively 


Each Segment of an Address Space is associated with one of the three processor operating modes (User, Supervisor, 
or Kernel). A Segment that is associated with a particular mode is accessible if the processor is running in that or a 
more-privileged mode. For example, a Segment associated with User Mode is accessible when the processor is run- 
ning in User, Supervisor, or Kernel Modes. A Segment is not accessible if the processor is running in a less privileged 
mode than that associated with the Segment. For example, a Segment associated with Supervisor Mode is not accessi- 
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ble when the processor is running in User Mode and such a reference results in an Address Error Exception. The 
‘Reference Legal from Mode(s)” column in Table 48 lists the modes from which each Segment may be legally refer- 
enced. 


If a Segment has more than one name, each name denotes the mode from which the Segment is referenced. For exam- 
ple, the Segment name “useg” denotes a reference from user mode, while the Segment name “kuseg” denotes a refer- 
ence to the same Segment from kernel mode. 


References to 64-bit Segments (as shown in the “Segment Type” column of Table 48) are enabled only if the appro- 
priate 64-bit Address Enable is on (see 4.5.1 on page 72, and the “64-bit Enable” column of Table 48). References to 
32-bit Compatibility Segments are always enabled. 


4.6.3 Compliance 
A MIPS64 compliant processor must implement the following 32-bit éCompaubility Segments: 
e  useg/kuseg 
° ksegO 
e  ksegl 
In addition, a MIPS64 compliant processor using the TLB-based address transla aan epee must also Raa 


the kseg3 32-bit Compatibility Segment. It is also strongly recommended th 
whether Supervisor Mode is implemented or not. 


-bit addressing and the 64-bit 
ented, it must be implemented as 


“hye 


ments associated with that mode. If Supervisor Mode 1 is i 
Supervisor Mode is not implemented a processor may 


.n attempt to reference an Poe ear Eon of a 


SS s Error eee 


4.6.4 Access Control as a Functio ass and Operating Mode 


Table 49 enumerates the action taken by the process for each section of the 64-bit Address Space as a function of 
the operating mode of the processor. The selection of TLB Refill vector and other special-cased behavior is also listed 
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for each reference. 


Table 49: Address Space Access and TLB Refill Selection as a Function of Operating Mode 


Action when Referenced from Operating 
Mode 


Virtual Address Range 


Assuming 
Symbolic SEGBITS = 40, Segment - Supervisor | | 
PABITS = 36 Name(s) | User Mode?® Mode Kernel Mode 


OxFFFF FFFF FFFF FFFF 


OxFFFF FFFF FFFF FFFF 


Address Error 


Mapped 
Refill Vector: 
TLB (KX=0) 
XTLB(KX=1) 
Address Error 
See 4.6.8 on 
: page 83 for 
3 special behav- 
4 ior when 
: Debugpmy =] 


0xFFFF FFFF DFFE FFFF 4, a Mapped Mapped 


through through 


OxFFFF FFFF E000 0000 


OxFFFF FFFF E000 0000 


OxFFFF FFFF DFFF FFFF 


through through Refill Vector”: | Refill Vector: 


; TLB (KX=0) | TLB (KX=0) 
OxFFFF FFFF C000 0000 OxFFFF FFFF CO00 000 XTLB(KX=1) | XTLB(KX=1) 
OxFFFF FFFF BFFF FFFF | 0xFFFF FFFF BFFF I _ Unmapped, 
é Uncached 
through us 0 Address Error | Address Error 
: See Section 
OxFFFF FFFF A000 0000  FFFF 100. ee page 
OxFFFF FFFF 9FFF FFFF | 0xFFFF QFFFFFFF |} °° fs Unmapped 
through through Address Error | Address Error See Section 
_ 4.6.5 on page 
OxFFFF FFFF 8000 0000 OxFFFF FFFF 8000 0000 79 


OxFFFF FFFF 7FFF FFFF 


OxFFFF FFFF 7FFF FFFF 


through 
Da through 


0xC000 0000 0000 0000 + 
9SEGBITS_ 531 


OxC000 OOFF 8000 0000 


Address Error Address Error | Address Error 
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Table 49: Address Space Access and TLB Refill Selection as a Function of Operating Mode 


Action when Referenced from Operating 


Virtual Address Range Mode 
Assuming 
Symbolic — _ SEGBITS = 40, Segment Supervisor 
| | -PABITS = 36 Name(s) -|- User Mode* Mode Kernel Mode 


; Address Error 
0xC000 0000 0000 0000 + ifKX =0 
9SEGBITS _ 531 _ | OxC000 OOFF 7FFF FFFF 
through xkseg Address Error | Address Error el ta 
through | KX = | 
: OxC000 0000 0000 0000 | 
0xC000 0000 0000 0000 Refill Vector: 
XTLB 
Address Error 
if KX =Oorin 
certain 
0xBFFF FFFF FFFF FFFF | 0xBFFF FFFF FEFF FFFF seu renee 
“ within the 
through through Address Error | Address Error peement 
Unmapped 


0x8000 0000 0000 0000 0x8000 0000 0000 0000 | 


See Section 


4.6.6 on page 
80 
Ox7FFF FFFF FFFF FFFF 
through 
Address Error | Address Error | Address Error 


0x4000 0000 0000 0000 + | - 
QSEGBITS 


0x4000 0000 0000 0000 + 
SEGBITS _ | 


0x4000 OOFF ‘Paaza 


through 


through 


| 0x4000 0000 0000 0000 
0x4000 0000 0000 0000 | | | 


Ox3FFF FFFF FFFF FFFF 


Address Error Address Error 
if SX =0 if SX =0 
xsseg | ~ Mapped if Mapped if 
fksses Address Error SX =] SX=1 
| | Refill Vector: | Refill Vector: 
7 XTLB XTLB 
Ox3FFF FFFF FFFF FFFF 
| Address.Error | Address Error | Address Error 


through 
through 


0x0000 0000 0000 0000 + 
QSEGBITS 


0x0000 0100 0000 0000 


November L5, 1999 = 78 - 


MIPS® PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCU} MENT SUBJECT TO CONFIDENTI ALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 


MIPS64™ Specification 


Table 49: Address Space Access and TLB Refill Selection as a Function of Operating Mode 


Symbolic 


0x0000 0000 0000 0000 + 
SEGBITS _ 


through 


0x0000 0000 8000 0000 


Virtual Address Range 


Assuming 
SEGBITS = 40, 
PABITS = 36 


0x0000 OOFF FFFF FFFF 
through 


0x0000 0000 8000 0000 


Segment 
Name(s) 


User Mode® 


Address Error 
if UX =0 


xuseg 
xsuseg 
xkuseg 2 


_Refill Vector: 


Mapped if 


Action when Referenced from Operating 


Mode 


Supervisor 
Mode 


Address Error 
if UX =0 


_ Mapped if 
UxX=1 


Refill Vector: 
XTLB 


Kernel Mode 


Address Error 
if UX =0 


Mapped if 
UAsS 


Refill Vector: 
XTLB 


See Section 
4.6.7 on page 
83 for imple- 

mentation 


XTLB 
| dependent 
behavior 
when Statu- 
Serr =! 


Unmapped if 
StatuSpr = l 


See Section 
4.6.7 on page 
83 


Mapped 


0x0000 0000 7FFF FFFF a 
Refill Vector: 
TLB (UX=0) 

XTLB(UX=1) 


Refill Vector: 
TLB (UX=0) 
XTLB(UX=1) 


through 
Mapped if 
0x0000 0000 0000 0000 StatuSpp, =0 
Refill Vector: 
TLB (UX=0) 
XTLB(UX=1) 


a. See Section 4.6.9 on page 84 for the special treatment of the address for data references when the processor is run- 
ning in User Mode and the UX bit is zero. | 
_ b. Note that the Refill Vector for references to sseg/ksseg is determined by the state of the KX bit, not the SX bit. This 
simplifies the processor implementation by allowing them to treat'the entire quadrant of the address space in which 
VA63.62 are 11, in the same manner, as well as simplifying operating system software design which does not use 
Supervisor Mode. 


4.6.5 Address Translation and Cache Coherency Attributes for the kseg0 and kseg1 Seg- 
ments 


The ksegO and kseg! Unmapped Segments provide a window into the least significant oe bytes of physical memory, 
and, as such, are not translated using the TLB or other address translation unit. The cache coherency attribute of the 


ksegO Segment is supplied by the KO field of the Config register. The cache coherency attribute for the kseg! Segment 
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is always Uncached. Table 50 describes how this transformation is done, and the source of the cache coherency 
attributes for each Segment. 


Table 50: Address Translation and Cache Coherency Attributes for the kseg0 and kseg1 Segments 


re ia Virtual Address Range | Generates Physical Address Cache Attribute 


OxFFFF FFFF BFFF FFFF | 0x0000 0000 1FFF FFFF 


Uncached 


through through 


OxFFFF FFFF A000 0000 0x0000 0000 0000 0000 


OxFFFF FFFF 9FFF FFFF 0x0000 0000 1 FFF FFFF 


From KO field of 
Config Register 


through through 


OxFFFF FFFF 8000 0000 


0x0000 0000 0000 0000 


- 4.6.6 Address Translation and Cache Coherency Attrib tes for the xkphys Segment 


, each 


The xkphys Unmapped Segment is actually composed of 8 nOatESS ranges which provides a window into the 


{uti the TLB or other address translation unit. 
has the same encoding as that shown in 


entire 2PAB/S bytes of physical memory and, as such, is not tran 
_ For this Segment, the cache coherency attribute is taken from 1 
_ Table 62. An Address Error Exception occurs if VA5¢_¢ 


are non-zero. If no Address Error Exception occurs, the 


63 6261 59 58 ; i : 
Address. Error if Nou: ETO» | 8 sigh gre re es 


: Physical Address... .- +; 


Table 51: Address Translation and Cacheability Attributes for the xkphys Segment 


Virtual Address Range 


- Svmbolic = Assuming Generates Physical an | 
PABITS = 36 Address Cache Attribute 


OxBFFF FFFF FFFF FFFF 


OxBFFF FFFF FFFF FFFF 


through 
through Address Error 


0xB800 0000 0000 0000 + 
>PABITS 0xB800 0010 0000 0000 
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Table 51: Address Translation and Cacheability Attributes for the xkphys Segment 


Virtual Address Range 


Symbolic Assuming Generates Physical 
‘ PABITS = 36 Address Cache Attribute 


0Ox0000 9x0000 0000 0000 0000 + 0000 0000 + 
>PABITS _ | 


0xB800 0000 0000 0000 + 
PABITS _y 


OxB800 OOOF FFFF FFFF 


Uses encoding 7 of 


through Table 62 


through through 


0xB800 0000 0000 0000 


0xB800 0000 0000 0000 0x0000 0000 0000 0000 


OxB7FF FFFF FFFF FFFF 


OxB7FF FFFF FFFF FFFF 


through 


through Address Error N/A 


0xB000 0000 0000 0000 + 
aPABITS 


OxB000 0010 0000 0000 


0xB000 0000 0000 0000 + 
PABITS _ 1 


000 


Uses encoding 6 of 
Table 62 


through 


through 


OxB000 0000 0000 0000 


0xB000 0000 0000 0000 


OxAFFF FFFF FFFF FFFF 


through 


’ Address Error N/A 


OxA800 0000 0000 0000 + 
a PABITS 


“| 0x0000 0000 0000 0000 + 
>PABITS _ | 


OxA800 0000 0000 0000 + 
>PABITS_ 4» 


Uses encoding 5 of 
Table 62 


through 


through through 


0x A800 0000 0000 0000 


Ox A800 0000 0000 0000: 0x0000 0000 0000 0000 


OxA7FF FFFF FFFF FFFF 


OxA7FF FFFF FEFF FFFF | 


through 


through | Address Error 


0xA000 0000 0000 0000 + 
2 PABITS 


0xA000 0010 0000 0000 
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Table 51: Address Translation and Cacheability Attributes for the xkphys Segment 


| Virtual Address Range 
Symbolic Assuming Generates Physical 
y PABITS = 36 Address Cache Attribute 


0x A000 0000 0000 0000 + 0x0000 0000 0000 0000 + 
>PABITS _ >PABITS _ 1 


0xA000 000F FFFF FFFF — 


Uses encoding 4 of 


oven Table 62 


through through 


0xA000 0000 0000 0000 


0x A000 0000 0000 0000 0x0000 0000 0000 0000 


Ox9FFF FFFF FFFF FFFF 


OxOFFF FFFF FFFF FFFF 


through 


through N/A 


0x9800 0000 0000 0000 + 
9 PABITS 


0x9800 0010 0000 0000 


0x9800 0000 0000 0000 :+ 
PABITS _ 1 


0x9800 OOOF FFFF FFFF 


Cacheable (see 
encoding 3 of 
Table 62) 


through 


through 


0x9800 0000 0000 0000 . 
. 0000 0000 


0x9800 0000 0000 0000 


Ox97FF FFFF FFFF FFFF 


through 


Address Error 


0x9000 0000 0000 0000 + 
9 PABITS 


0x9000 0000 0000 0000 +... fe 4 
“9 PABITS wt 


0x0000.0000 0000.0000 + 
‘yPABITS _ | 


Uncached (see 
encoding 2 of 
Table 62) 


~-. through through 


Lae: 


0x9000 0000 0000 0000 


0x9000 0000 0000 0000 |. 
0x0000 0000 0000 0000 


Ox8FFF FFFF FFFF FFFF 


through 


through “Address Error | N/A 


0x8800 0000 0000 0000 + 
7 PABITS 


0x8800 0010 0000 0000 
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Table 51: Address Translation and Cacheability Attributes for the xkphys Segment 


Virtual Address Range 
; Assuming 
mympene PABITS = 36 


0x8800 0000 0000 0000 + 
>PABITS _ 0x8800 000F FFFF FFFF 


Generates Physical 
Address 


Cache Attribute 


0x0000 0000 0000 0000 + 
 yPABITS _ 


Uses encoding | of 


uiouen Table 62 


through through 


0x8800 0000 0000 0000 


0x8800 0000 0000 0000 0x0000 0000 0000 0000 


Ox87FF FFFF FFFF FFFF 


Ox87FF FFFF FFFF FFFF 


through 


through 


Address Error 


0x8000 0000 0000 0000 + 
7 PABITS 


0x8000 0010 0000 0000 ? j 4 


0x8000 0000 0000 0000 + 
PABITS _ 


00 0000 
0x8000 000F FFFF FFFF 000000600 0000 0000 + 


Uses encoding 0 of 
Table 62 


through 


through 


0x8000 0000 0000 0000 


0x8000 0000 0000 0000 


is, an implementation may choose to treat the entire site ain? in the same manner as he kuseg Sosment 


4.6.8 Special Behavior for the kseg3 Segment when Debugpy, = 1 - 


If EJTAG is implemented on the processor, the EJTAG block may treat the virtual address range OxFFFF FFFF FF20 
0000 through OxFFFF FFFF FF3F FFFF, inclusive, as a special memory-mapped region in Debug Mode. A MIPS64 
compliant implementation that also implements EJTAG must: 


¢ explicitly range check the address range as given and not assume that the entire region between OxFFFF 
FFFF FF20 0000 and OxFFFF FFFF FFFF FFFF is included in the special memory-mapped region. 
* not enable the special EJTAG mapping for this region in any mode other than in EJTAG Debug mode. 


Even in Debug mode, normal memory rules may apply in some cases. Refer to the EJTAG specification for details on 
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this mapping. 


4.6.9 Special Behavior for Data References in User Mode with Statusyy = 0 


When the processor is running in User Mode, legal addresses have VA3, equal zero, and the 32-bit virtual address is 
sign-extended (really zero-extended because VA3, is zero) into a full 64-bit address. As such, one would expect that 


the normal address bounds checks on the sign- extended 64-bit address would be sufficient. Unfortunately, there are 
cases in which a program running on a 32-bit processor can generate a data address that is legal in 32 bits, but which 
is not appropriately sign-extended into 64-bits. For example, consider the following code example: 


la r10, Ox80000000 
lw rlQ, -4(r10) 


The results of executing this address calculation on 32-bit and 64-bit processors with UX equal zero is shown below: 


32-bit Processor 64-bit Processor 
0x8000 O00O0 OxFFFF FFFF 8000 0000 
+OxFFFF FFFC +OxFFFF FFFF FFFF- FFFEC i 


Ox7FFF FFFC OxFFFF FFFF 7FFF FFFC 


On a 32-bit processor, the result of this address calculation results i | _ useg ndaiess On a 64-bit processor, 
however, the sign-extended address in the base register is added to the sig nded displacement as a 64-bit quan- 


tity which results in a carry-out of bit 31, producing an address that is m properly sign extended. 


To provide backward compatibility with 32-bit User Mode code, 
following special case for data references (and explicitly not for inst 
in User Mode and the UX bit is zero in the Status registe 


ompliant processors must implement the 
erences) when the processor is running | 


The effective address calculated by a load, store tbe sign extended from bit 31 into bits 
63..32 of the full 64-bit address, ignoring the pre ; 


for instruction references. 


This results in a properly zero-extended ad 
example above), and results in a proper! 
a one). Code running in Debug Mode, 4 

off is prohibited from generating an effecti 
duced, the operation of the instruction g 


4.6.10 TLB-Based Virtual Address Translation 


~ This section describes the TLB-based virtual address translation mechanism. If a TLB-based translation mechanism 
“is implemented, it must be the one described below. Note that sufficient TLB entries must be implemented to avoid a 
~TLB exception loop on load and store instructions. The absolute minimum is therefore two entries, but the realistic 
minimum.is.a function of the operating system running on the processor. Sixteen entries is a realistic minimum for 

. simple operating systems. More may be required for complex operating systems. 


~4,6.10.1 Address Space Identifiers (ASID) 


The TLB-based translation mechanism supports Address Space Identifiers to uniquely identify the same virtual 
address across different processes. The operating system assigns ASIDs to each process and the TLB keeps track of 
the ASID when doing address translation. In certain circumstances, the operating system may wish to associate the 
same virtual address with all processes. To address this need, the TLB includes a global (G) bit which over-rides the 
ASID comparison during translation. 
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4.6.10.2 TLB Organization 


The TLB is a fully-assoctative structure which is used to translate virtual addresses. Each entry contains two logical 
components: a comparison section and a physical translation section. The comparison section includes the mapping 
region specifier (R) and the virtual page number (actually, the virtual page number/2 since each entry maps two phys- 
ical pages, VPN2) of the entry, the ASID, the G(lobal) bit and a recommended mask field which provides the ability 
to map different page sizes with a single entry. The physical translation section contains a pair of entries, each of 
which contains the physical page frame number (PFN), a valid (V) bit, a dirty (D) bit, and a cache coherency field 
(C). There are two entries in the translation section for each TLB entry because each TLB entry maps an aligned pair 
of virtual pages and the pair of physical translation entries corresponds to the even and odd pages of the pair. 
Figure 12 shows the logical arrangement of a TLB entry. The physical arrangement of the TLB entry data is imple- 
mentation dependent, and the implemented size of the R, VPN2, PFNO, and PFN1 fields can vary as a function of vir- 
tual address modes supported (32-bit versus 64-bit) and of the needs of the implementation. 


Figure 12: Contents of a TLB Entry 


PageMask 


The fields of the TLB entry correspond exactly to the 2 
registers. The even page entries in the TLB (e.g., PFNO) co 
EntryLol. 


4.6.10.3 Address Translation 


When an address translation is requested, the virt 


age number and the current process ASID are presented to the 
TLB. All entries are checked simultaneously f for a match, 


nich occurs when all of the following conditions are true: 


e The current process ASID (as e EntryHi register) matches the ASID field in the TLB entry, 
or the G bit is set in the TLB e 


e Bits 63:62 of the virtual address match the regic on code j in the R field of the TLB entry. 


the TLB entry. The “appropriate” sumer of bits is determined by the PageMask field in each entry by per- 
forming an ANDNOT operation on both the virtual page number and the TLB VPN2 field. This allows each 
entry of the TLB to support a different page size, as determined by the PageMask register at the time that the 

~-TLB entry was written.-If the recommended PageMask register is not i the TLB operation is as 
if the PageMask register was written with a zero. 


If a TLB entry matches the address and ASID presented, the espouilis PEN, C, V, and D bits are read from the 
translation section of the TLB entry. Which of the two PEN entries is read is a function of the virtual address bit 
immediately to the right of the section masked with the PageMask entry. 


The valid and dirty bits determine the final success of the translation. If the valid bit is off, the entry is not valid and a 
TLB Invalid exception is raised. If the dirty bit is off and the reference was a store, a TLB Modified exception is 
raised. If there is an address match with a valid entry and no dirty exception, the PFN and the cache attribute bits are 
appended to the offset-within-page bits of the address to form the final physical address with attributes. 
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The TLB lookup process can be described as follows: 


found <— 0 
for 1 in 0...TLBEntries- 1 
if (TLB[i]R = vag3 62) and 
((TLB[i]ypn2 and not (TLB[i} mask) = (Vasegaits-1..13 and not (TLB[i]yas,))) and 
(TLB[i]g or (TLB[i] asp = EntryHi,syp)) then 
# EvenOddBit selects between even and odd halves of the TLB as a function of. 
# the page size in the matching TLe ou : | 
case TLB[i}Mask 


000000000000,: EvenOddBit <— 12 
0000000000115: EvenOddBit <— 14 
0000000011115: EvenOddBit <— 16 
0000001111115: EvenOddBit <— 18 
OOOOLI111111,: EvenOddBit — 20 
OOLIILILL1115: EvenOddBit <— 22 
1111111111115: EvenOddBit — 24 
otherwise: UNDEFINED 
endcase | 
if VaEvenOaaBit = 9 then 
pin <—~ TLBLilprno 
v — TLB[i] vo 
c < TLB[ilco 
d + TLB[i]po 


else 
pin — TLB[i]peny 
v<¢ TLB[i]y; 
c¢ TLB[ilc; 
d< TLB[iJp; 

endif 

if v = 0 then 
InitiateTLBInvalidE 


InitiateTLBModifi 
endif 


pa <— et ec aleaal l| Vag venOddBit-1..0 
found < 1 
break | 
endif 
.° endfor 
if found = O then 
InitiateTLBMissException(reftype, VA64Enable) 
endif 


It is implementation dependent whether the VPN2, PFNO, and PFN] fields of the TLB are stored with the original 

_ value, or are pre-masked by the Mask value on a TLB write. This provides implementations with the flexibility of 
eliminating the “and not TLB[i],,,,”" terms in the pseudo code above. Note that the virtual address must still be 
masked with the TLB[i],y,,, value in either case. 


Table 52 demonstrates how the physical address is generated as a function of the page size of the TLB entry that 
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matches the virtual address. The “Even/Odd Select” column of Table 52 indicates which virtual address bit is used to 
select between the even (EntryLo0) or odd (EntryLol) entry in the matching TLB entry. The “PA generated from” 
column specifies how the physical address is generated from the selected PFN and the offset-in-page bits in the vir- 
tual address. In this column, PFN is the physical page number as loaded into the TLB from the EntryLo0 or EntryLol 
registers, and has the bit range PFN pa gj7s-1-12..9, Corresponding to PApaayrs-1. 12: 


Table 52: Physical Address Generation 


, Even/Odd 
Select PA generated from 


ears 


4.7 Interrupts 


The processor supports eight interrupt requests, broken 


Performance counter interrupt - Avpe. 
the counter is a one, and the inte: 


er interrupt is raised when the most significant bit of | 
e IE bit in the performance counter control register. 


Timer interrupts, performance counter. 
dependent way to create the ultimate ha 


The current interrupt requests are visible via th d in the Cause register on any read of that register (not just 
after an interrupt exception has occurred). The mapping of Cause register bits to the various interrupt requests is 
shown in Table 53. 


Table 53: Mapping of Interrupts to the Cause and Status Registers 


Cause Register Bit Status Register Bit 

Interrupt 
Number Name Number Name 

Number 


Interrupt Type 


Software Interrupt 
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Table 53: Mapping of Interrupts to the Cause and Status Registers 
Interrupt 


Cause Register Bit Status Register Bit |. 
Number 


Interrupt Type 


Hardware Interrupt 


Hardware Interrupt, Timer Interrupt, 
or Performance Counter Interrupt 


interrupt is only taken when all of the following are true: 


An interrupt request bit is a one in the IP field of the Cause re : _ 
he mapping of bits is shown in 
Table 53. = 

The IE bit in the Status register is a one. 


Logically, the IP field of the Cause register is bit-wise 
ant bits are ORed together and that value is ANDed 


4.8 Exceptions 


Normal execution of instructions ma 


load instruction), or by an event not directly related Struction execution (e.g., an external interrupt). When an 
exception occurs, the processor stops processing instructions, saves sufficient state to resume the interrupted instruc- 
tion stream, enters kernel mode, and starts a software exception handler. The saved state and the address of the soft- 
ware exception handler are a function of both the type of exception, and the current state of the processor. 


4.8.1 Exception Priority 


Table 54 lists all possible exceptions, and the relative priority of each, highest to lowest. 


Table 54: Priority of Exceptions 


The Cold Reset signal was asserted to the processor 
The Reset signal was asserted to the processor 


Asynchro- 
nous Reset 
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Table 54: Priority of Exceptions 


An EJTAG Single Step occurred. Prioritized above other 
exceptions, including asynchronous exceptions, so that one 
can single-step into interrupt (or other asynchronous) han- 
dlers 


Debug Interrupt An EJTAG interrupt (EjtagBrk or DINT) was asserted 


a 


Deferred Watch A watch exception, deferred because EXL‘was one: when 


the exception was detected, was asserted after EXL went to 
Debug Instruction Break 


Debug Single Step 


Synchro- 
nous 
Debug 


Asynchro- 
nous ~ 
Debug 


Zero 


Synchro- 
nous 
|, Debug 


An EJTAG instruction break condition was asserted. Priori- 
tized above instruction fetch exceptions to allow break on _ 


Watch - Instruction fetch 


Address Error - Instruction fetch 


TLB/XTLB Refill - Instruction | [on an ir Suachios 
fetc h ones _ 


TLB Invalid - Instruction fetch 


Cache Error - Instruction fetch AC ai 


Bus Error - Instruction fetch 


SDBBP 


Instruction Validity Exceptions. 


nous 


An EJTAG SDBBP instruction was executed | Synchro- 
nous 


Debug 


An instruction could not be completed because it was not . 
| allowed access to the required resources, or was illegal: 
Coprocessor unusable, reserved instruction. If both excep- 
tions occur on the same instruction, the Coprocessor Unus- 
able Exception takes priority. 


Execution Exception An instruction-based exception occurred: Integer overflow, 
trap, system call, breakpoint, floating point exception 


Synchro- 
nous 


November 15, 1999 - 89 - 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS, DUPLICATION IS PROHIBITED. 


Revision 1.0 | | MIPS64™ Specification 


Table 54: Priority of Exceptions 


A precise EJTAG data break on load/store (address match 
only) or a data break on store (address+data match) condi- 

tion was asserted. Prioritized above data fetch exceptions to 
allow break on illegal data addresses. 


Precise Debug Data Break Synchro- 


nous 
Debug 


_ Watch - Data access A watch address match was detected on the address refer- 
enced by a load or store. Prioritized above data fetch excep- 


tions to allow watch on illegal data addresses. 


An unaligned address, or an address that was inaccessible in 
the current processor mode was referenced, by a load or 
store instruction 


TLB/XTLB Refill - Data access A TLB miss occurred on a data access 


TLB Invalid - Data access The valid bit was zero in the TLB entry mapping the address 
referenced by a load or store instruction ~ “ 


Address error - Data access 


Synchro- 
nous 


The dirty bit was zero in the T <B entry m: ipping the address. | 


ita reference 


OF sto 


tore data reference 


break on load (address+data match 
sserted. Prioritized last because all 
complete in order to do data 


Synchro- 
nous 
Debug 


The “Type” column of Table 54 describes the 
tion type. 


Exception Type “ . Characteristics 


Denotes a reset-type exception that occurs asynchronously to instruction exe- 
cution. These exceptions always have the highest priority to guarantee that the 
processor can always be placed in a runnable state. 


Asynchronous Reset 


Denotes an EJTAG debug exception that occurs asynchronously to instruction 
execution. These exceptions have very high priority with respect to other 

- | exceptions because of the desire to enter Debug Mode, even in the presence of 
other exceptions, both asynchronous and synchronous. 


Asynchronous Debug - 


Denotes any other type of exception that occurs asynchronously to instruction 
execution. These exceptions are shown with higher priority than synchronous 
exceptions mainly for notational convenience. If one thinks of asynchronous 
exceptions as occurring between instructions, they are either the lowest prior- 
ity relative to the previous instruction, or the highest priority relative to the 
next instruction. The ordering of the table above considers them in the second 
way. 


Asynchronous 
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Table 55: Exception Type Characteristics 


Characteristics 


Denotes an EJTAG debug exception that occurs as a result of instruction exe- 
cution, and is reported precisely with respect to the instruction that caused the 
exception. These exceptions are prioritized above other synchronous excep- 

tions to allow entry to Debug Mode, even in the presence of other exceptions. 


Exception Type 


Synchronous Debug 


4.8.2 Exception Vector Locations 
The Reset, Soft Reset, and NMI exceptions are always vectored to location OxFFFF FFFF BFCO 0000. EJTAG Debug 


Denotes any other exception that occurs as a result of instruction execution, 
and is reported precisely with respect to the instruction that caused the excep- 
tion. These exceptions tend to be prioritized below other types of exceptions, 
but there is a relative priority of synchronous exceptions with each other. 


Reset, Soft Reset, NMI 


EJTAG Debug (with ProbEn = 0 = 
in the EJTAG_Control_register) |*». 


EJTAG Debug (with ProbEn =. 
in the EJTAG_Control_register’ 


Table 57: Exception Vector Offsets 


None (Uses Reset Base Address) 
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Table 58: Exception Vectors 


a 
femacoee | [s | 0 [marco 
resem | fs | [oc 
a CY 
repent fa | _[r on 
pauses || fs | [on rSKOOD 
Sr 
a 
fone 
= 


FEFF BFCO 0280 


All others Po, | Vey. OxFFFF FFFF 8000 0180 


All others  OxFFFF FFFF BFCO 0380 


x’ denotes don’t care 


4.8.3 General Exception Processing 


With the exception of Reset, Soft Reset, and NMI excepuons, which have their own epee Processes as described 
below, exceptions have the same basic processing flow:. 


e Ifthe EXL bit in the Status register is zero, the EPC register is loaded with the PC at which execution will be 
restarted and the BD bit is set appropriately in the Cause register. The value loaded into the EPC register is 
the current PC if the instruction is not in the delay slot of a branch, or PC-4 if the instruction is in the delay 
slot of a branch. If the EXL bit in the Status register is set, the EPC register is not loaded and the BD bit is 
not changed in the Cause register. 

e The CE, and ExcCode fields of the Cause registers are loaded with the values appropriate to the exception. 
The CE field is loaded, but not defined, for any exception type other than a coprocessor unusable exception. 

¢ The EXL bit is set in the Status register. | 

e The processor is started at the exception vector. 


The value loaded into EPC represents the restart address for the exception and need not be modified by exception 
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handler software in the normal case. Software need not look at the BD bit in the Cause register unless is wishes to 
identify the address of the instruction that actually caused the exception. 


Note that individual exception types may load additional information into other registers. This is noted in the descrip- 
tion of each exception type below. 


Operation: 
if Statuspy; = 0 
if InstructionInBranchDelaySlot then 
EPC <+ PC - 4 
Causepp < 1 
else 
EPC <— PC 
Causepgp <- 0 
endif 
if ExceptionType = TLBRefill then 
vectorOffset <- 0x000 
elseif (ExceptionType = XTLBRefill) then 
vectorOffset < 0x080 
elseif (ExceptionType = Interrupt) and 
(Cause;y = 1) then 
vectorOffset < 0x200 
else 
vectorOffset — Ox180 
endif 
else 
vectorOffset < 0x180 
endif 
Causecg <— FaultingCoprocessorNumber 
Causeg,ccode <—- ExceptionType 
Statusex; <— | 
if Statuspry = | then 


4.8.4 EJTAG Debug Exception 


An EJTAG Debug Exception occurs when one of a number of EJTAG-related conditions is met. Refer to the EJTAG 
Specification for details of this exception. 


Entry Vector Used “hie, gis | Oo ae 
| OxFFFF FFFF BFCO 0480 if the ProbEn bit is zero in the EJTAG_Control_register; OxFFFF FFFF FF20 
0200 if the ProbEn bit is one. 


4.8.5 Reset Exception 


A Reset Exception occurs when the Cold Reset signal is asserted to the processor. This exception is not maskable. 
When a Reset Exception occurs, the processor performs a full reset initialization, including aborting state machines, 
establishing critical state, and generally placing the processor in a state in which it can execute instructions from 
uncached, unmapped address space. On a Reset Exception, the state of the processor in not defined, with the follow- 
ing exceptions: 


November 15, 1999 - 93 - 


MIPS® PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 | | MIPS64™ Specification 


¢ The Random register is initialized to the number of TLB entries - 1. 

¢ The Wired register is initialized to zero. 

¢ The Config and Config! registers are initialized with their boot state. 

¢ The BEV, TS, SR, NMI, ERL, and RP fields of the Status register are initialized to a specified state. 

¢ Watch register enables and Performance Counter register interrupt enables are cleared. 

e¢ The ErrorEPC register is loaded with PC-4 if the state of the processor indicates that it was executing an 
instruction in the delay slot of a branch. Otherwise, the ErrorEPC register is loaded with PC. Note that this 
value may or may not be predictable if the Reset Exception was taken as the result of power being applied to 

the processor because PC may not have a valid value in that case. In some implementations, the value loaded 

into ErrorEPC register may not be predictable on either a Reset or Soft Reset Exception. 

¢ PC is loaded with OxFFFF FFFF BFCO 0000. 


Cause Register ExcCode Value 
None 


Additional State Saved 
None 


Entry Vector Used 
Reset (OxXFFFF FFFF BFCO 0000) 


Operation 
Random <~- TLBEntries - | 
Wired < 0 
Config < ConfigurationState 
Configxy <- 2 # Suggested - see Confi 
Configl < ConfigurationState 
Statuspry < | 
Statusys <— 0 
StatusSsp < 0 
Statusymy <- 0 
StatuserR; <— | 
Statuspp <— 0 
WatchLo[n]; < 0 
WatchLo[n]p < 0 
WatchLo[n]y < 0 
PerfCnt.Control[n]j; <— 0 
if Ts auctor ls B anchbelavsleet then 
... ErrorEPC < PC - 4 
else 
ErrorEPC < PC 
endif ; 
.PC < OxFFFF FFFF BFCO 0000 


escription 


4.8.6 Soft Reset Exception 


_A Soft Reset Exception occurs when the Reset signal is asserted to the processor. It is implementation dependent 
whether Soft Reset is implemented. If the Soft Reset Exception is not implemented, the Reset Exception should be 
used instead. This exception is not maskable. When a Soft Reset Exception occurs, the processor performs a subset of 
the full reset initialization. Although a Soft Reset Exception does not unnecessarily change the state of the processor, 
it may be forced to do so in order to place the processor in a state in which it can execute instructions from uncached, 
unmapped address space. Since bus, cache, or other operations may be interrupted, portions of the cache, memory, or 
other processor state may be inconsistent. In addition to any hardware initialization required, the following state is 
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| established on a Soft Reset Exception: 


¢ The BEV, TS, SR, NMI, ERL, and RP fields of the Status register are initialized to a specified state. 

¢ Watch register enables and Performance Counter register interrupt enables are cleared. 

¢ The ErrorEPC register is loaded with PC-4 if the state of the processor indicates that it was executing an 
instruction in the delay slot of a branch. Otherwise, the ErrorEPC register is loaded with PC. Note that this 
value may or may not be predictable. 

¢ PC is loaded with OXFFFF FFFF BFCO 0000. 


Cause Register ExcCode Value 
None 


Additional State Saved 
None 


Entry Vector Used 
[ Reset (OXFFFF FFFF BFCO 0000) 


Operation 
Configxyg < 2 # Suggested - see Config register description : 
Statuspey < | — 
Statusrs <— 0 
StatuSsp < | 
Statusyy <— 0 
StatuSgery < | 
Statuspp <— 0 
WatchLo[n], < 0 
WatchLo[n]p < 0 
WatchLo[n]y < 0 # For all i 
PerfCnt.Control[n];¢ < 0 # For all 
if InstructionInBranchDelay Slot then . 


Te 


| ErrorEPC <—- PC - 4 
else 
i ErrorEPC <— PC 
endif : 
| PC < OxFFFF FFFF BFCO 0000 


4.8.7 Non Maskable Interrupt (NMI) Exception 


A non maskable interrupt exception occurs when the NMI signal is asserted to the processor. It 1s eaplementation 
dependent whether the NMI exception is implemented. However, several embedded operating systems make use of 
the NMI exception, so its implementation is strongly recommended. 


~ Unlike-all other interrupts, this exception is not maskable. An NMI occurs only at instruction.boundaries, so does not 
do any reset or other hardware initialization. The state of the cache, memory, and other processor'state is consistent 
and all registers are preserved, with the following exceptions: 


¢ The BEV, TS, SR, NMI, and ERL fields of the Status register are initialized to a specified state. 

¢ The ErrorEPC register is loaded with PC-4 if the state of the processor indicates that it was executing an 
instruction in the delay slot of a branch. Otherwise, the ErrorEPC register is loaded with PC. 

¢ PC is loaded with OXFFFF FFFF BFCO 0000. 


Cause Register ExcCode Value 
None 
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Additional State Saved 
None 


Entry Vector Used 
Reset (OxFFFF FFFF BFCO 0000) 


Operation 
Statuspry < | 
Statusrs <- 0 
' Statussr <— 0 
Statusnmay <— 1 
Statusger, < | 
if InstructionInBranchDelaySlot then 
ErrorEPC < PC - 4 
else 
_ _ErrorEPC < PC 
endif 
PC < OxFFFF FFFF BFCO 0000 


4.8.8 Machine Check Exception 


A machine check exception occurs when the processor detects an interr 
dent whether the Machine Check Exception is implemented. If no internal consi 
processor, the Machine Check Exception need not be implemented. | 


cy. It is implementation depen- 
ncy checking is performed by the 


Phx e “ 
Man 


The following conditions cause a machine check exception: 


(MU. It is implementation dependent 
ple matching entries, orona reference 


Detection of multiple matching entries in the TLB 


itior 1 in the ora exception iandler perhaps by 
flushing the entire TLB. If the condition can 1b software must clear this bit before resuming nor- 
mal operation. | 


If the condition is detected during a T , processors should attempt to preserve the entry already in 
the TLB, if possible, as that p vides the ost information for software debug of the problem. — 


Causé:Register ExcCode Value 
7 eect 


Additional State Saved 
8, Depends on the condition that caused the exception. See the iesuapaone above. 


Entry Vector Used 
‘General sic ace vector (offset v. 180) 


4.8.9 Address Error Exception 


An address error exception occurs under the following circumstances: 


¢ A load or store doubleword instruction is executed in which the address is not aligned on a doubleword 
boundary. 

e An instruction is fetched from an address that is not aligned on a word boundary. 

e A load or store word instruction is executed in which the address is not aligned on a word boundary. 

¢ A load or store halfword instruction is executed in which the address is not aligned on a halfword boundary. 

e Areference is made to a kernel address space from User Mode or Supervisor Mode. 
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¢ A reference is made to a supervisor address space from User Mode. 

e Areference is made to aa 64-bit address that is outside the range of the 32-bit Compatibility Address Space 
when 64-bit address references are not enabled. 

e A reference is made to an undefined or unimplemented 64-bit address when 64-bit address references are 
enabled. 


Note that in the case of an instruction fetch that is not aligned on a word boundary, PC is updated before the condition 
is detected. Therefore, both EPC and BadVAddr point at the unaligned instruction address. 


Cause Register ExcCode Value 
AdEL: Reference was a load or an instruction fetch 
AdES: Reference was a store 


Additional State Saved 


XContexty PN2 
XContextp 


EntryHiypn2 
EntryHip 


A TLB Refill or XTLB Refill exception occurs. : 
mapped address space and the EXL bit is zero in the Status register. Note that this is distinct from the case in which an » 
entry matches but has the valid bit off, in which.case’a TLB Invalid exception occurs. Refill exceptions have distinct 
exception vector offsets: 0x000 for a 32-bit TLB Refill and 0x080 for a 64-bit extended TLB (“XTLB”) refill. The 


XTLB refill handler is used whenever a reference is made to an enabled 64-bit address space. 


Cause Register ExcCode Value | 
' TLBL: Reference was a load or.an instruction fetch | . 
TLBS: Reference was a store 


Additional State Saved 


BadVAddr failing address 
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Context The Bad VPN2 field contains VA3).;3 of the failing 
address 


XContext The XContext Bad VPN2 field contains VAcgrc. 
BITS-1:13» and the XContext R field contains 
VA¢3.62 of the failing address. 


The EntryHi VPN2 field contains VA sSEGBITS-1:13 


of the failing address and the EntryHi R field con- 
tains VA¢3.6 of the failing address; the ASID field 


contains the ASID of the reference that missed 


EntryLoO UNPREDICTABLE 
{4 entryLo 1 UNPREDICTABLE 
Entry Vector Used 


¢ TLB Refill vector (offset 0x000) if 64-bit addresses are not enabled i d Statu vse =0 at the time of excep- 


tion. 
¢ XTLB Refill vector (offset 0x080) if 64-bit addresses are enabled 


¢ General exception vector (offset 0x180) in either case if Statuspy, 


d Statusy EXL = O at the time of exception. 
the time of exception 


4.8.11 TLB Invalid Exception 


A TLB invalid exception occurs when a TLB entr 
entry has the valid bit off. 


Cause Register ExcCode Value 
TLBL: Reference was a load 
TLBS: Reference was a store 


Additional State Saved 


failing address Pe 


The BadVPN2 field contains VA3,.13 of the failing 
address 


XContext The XContext BadVPN2 field contains VAggc. 
BITS-1:13> and the XContext R field contains 


VA63-62 of the failing address. 
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Entry Hi The EntryHi VPN2 field contains VAceGpiTs-1-13 
of the failing address and the EntryHi R field con- 
tains VA¢3.¢ of the failing address; the ASID field 


contains the ASID of the reference that missed 


UNPREDICTABLE 
EntryLol UNPREDICTABLE 


Entry Vector Used 
General exception vector (offset 0x 180) 


4.8.12 TLB Modified Exception 


A TLB modified exception occurs on a store reference to a mapped address when the matching TLB entry is valid, 
but the entry’s D bit is zero, indicating that the page is not writable. : 


” 


Cause Register ExcCode Value 
Mod 


Additional State Saved 


Bad VAddr 
The Bad VPN2 field ¢ 


Context 
address ; 
: 
tains VAg3.62 of the failing address; the ASID field 


EntryHi 
contains the ASID of the reference that missed 


EntryLo0 UNPREDICTABLE 
EntryLol UNPREDICTABLE ie 


Entry Vector Used 
General exception vector (offset 0x 180) 


failing address 


field « ntains VA SEGBITS-1:13 : 
ress and the EntryHi R field con- 


te 


4.8.13 Cache Error Exception 


A cache error exception occurs when an instruction or data reference detects a cache tag or data error, or a parity or 
ECC error is detected on the system bus when a cache miss occurs. This exception is not maskable. Because the error 
was in a cache, the exception vector is to an unmapped, uncached address. It is implementation dependent whether a 
cache error exception resulting from an access to the data cache is reported precisely with respect to the instruction 
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| that caused the cache error. 


Cause Register ExcCode Value 
N/A 


Additional State Saved 


Entry Vector Used 
Cache error vector (offset Ox 100) 


Operation 
CacheErr <- ErrorState 
Statusepy < | 


if InstructionInBranchDelaySlot then 


f ErrorEPC < PC - 4 
else 

| ErrorEPC <- PC ye 
endif 


if Statuspry = | then 


4.8.14 Bus Error Exception 


| cess makes a bus request (due to a cache miss or an 
i an error. Note that parity errors detected during bus transac- 
rror exceptions. It is implementation dependent whether a data 
the instruction that caused the bus error. 


| _ A bus error occurs when an instructior 
uncacheable reference) and that request is termi 
tions are reported as cache error exceptior 
bus error exception is reported precisely with respec 


Cause Register ExcCode Value 
IBE: Error on an instruction reference 
DBE: _ Error on a data reference 


Additional State Saved 
None 


Entry Vector Used 
General exception vector (offset 0x 180) 


4.8.15 Integer Overflow Exception © 


An integer overflow exception occurs when selected integer instructions result in a 2’s complement overflow. 
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Cause Register ExcCode Value 
Ov , 


Additional State Saved 
None 


Entry Vector Used 
General exception vector (offset 0x 180) 


4.8.16 Trap Exception 


A trap exception occurs when a trap instruction results in a TRUE value. 


Cause Register ExcCode Value 
Tr 


Additional State Saved 
None 


Entry Vector Used | 
General exception vector (offset 0x180) 


4.8.17 System Call Exception | 


A system Call exception occurs when a SYSCALL instruction is executed. - | 


Cause Register ExcCode Value 
Sys 


Additional State Saved 
None 


Entry Vector Used 
General exception vector (offset 0x1 


4.8.18 Breakpoint Exception ; 


A breakpoint exception occurs when a: ion is executed. 


Cause Register ExcCode Value 
Bp | 


Additional State Saved 
None 


Entry Vector Used 
General exception vector (offset Ox180) | 


4.8.19 Reserved Instruction Exception 
A Reserved Instruction Exception occurs if any of the following conditions is true: 


e An instruction was executed that specifies an encoding of the opcode field (Table 20) that is flagged with “*” 
(reserved), “6B” (higher-order ISA), “L” (64-bit) if 64-bit operations are not enabled, or an unimplemented 
“6” (ASE). 

¢ An instruction was executed that specifies a SPECIAL opcode encoding of the function field (Table 21) that 
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is flagged with “*” (reserved), “B” (higher-order ISA), or “L” (64-bit) if 64-bit operations are not enabled. 
¢ An instruction was executed that specifies a REGIMM opcode encoding of the rt field (Table 22) that is 
flagged with “*’’ (reserved). 

¢ An instruction was executed that specifies an unimplemented SPECIAL2 opcode encoding of the function 
field (Table 23) that is flagged with an unimplemented “0” (partner available), “L” (64-bit) if 64-bit opera- 
tions are not enabled, or an unimplemented “o” (EJTAG). 

¢ An instruction was executed that specifies a COPz opcode encoding of the rs field (Table 25, Table 27, 
Table 29) that is flagged with ‘““*” (reserved), “8” (higher-order ISA), “L” (64-bit) if 64-bit operations are not 
enabled, or an unimplemented “e” (ASE), assuming that access to the coprocessor ts allowed. If access to 
the coprocessor is not allowed, a Coprocessor Unusable Exception occurs instead. For the COP/ opcode, 
some implementations of previous ISAs reported this case as a Floating Point Exception, setting the Unim- 
plemented Operation bit in the Cause field of the FCSR register. 

¢ An instruction was executed that specifies an unimplemented COPO opcode encoding of the function field 
when rs is CO (Table 28) that is flagged with “*” (reserved), or an unimplemented “‘o”’ (EJTAG), assuming | 
that access to coprocessor 0 is allowed. If access to the coprocessor is not allowed, a Coprocessor Unusable 
Exception occurs instead. 

e An instruction was executed that specifies a COP] opcode encoding of the function field when rs is S, D, or 
W (Table 30, Table 31, Table 32) that is flagged with “*”’ (reser Vee), “Be (higher-order ISA), “L’ (64-bit) if 
64-bit operations are not enabled, or an unimplemented “e” (ASE), assuming that access to coprocessor | is 
allowed. If access to the coprocessor is not allowed, a Coprocessor Unusable Exception occurs instead. 
Some implementations of previous ISAs reported this case asa loating Poi t Exception, setting the Unim- - 


¢ An instruction was executed that specifies a COPJ opcode encodi gv ) 
and 64-bit operations are not enabled, or with a function field encoding that j is flagged with “*’* resceved) 
“B” (higher-order ISA), or an unimplemented “e” (ASE), assuming that access to coprocessor | is allowed. 
If access to the coprocessor is not allowed, a Coprocessor: Unusable Exception occurs instead. Some imple- 
mentations of previous ISAs reported this cas Floating Point rae setting the Unimplemented 
Operation bit in the Cause field of the FCS! 
e An instruction was executed that specifies a 


flagged with “*” (reserved), or any execu 


Cause Register ExcCode Value | 
RI 


Additional State Saved 
None 


Entry Vector Used 
General exception vector (offset 0x 180) 


4.8.20 Coprocessor Unusable Exception 
A coprocessor unusable exception occurs if any of the following conditions is true: 


¢ A COPO or Cache instruction was executed while the processor was running in a mode other than Debug 
Mode or Kernel Mode, and the CUO bit in the Status register was a zero 

¢ ACOP1, COP1X, LWC1, SWC1, LDC1, SDC1 or MOVCI (Special opcode function field encoding) 
instruction was executed and the CU1 bit in the Status register was a zero. 

e A COP2, LWC2, SWC2, LDC2, or SDC2 instruction was executed, and the CU2 bit in the Status register 
was a Zero. 
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Cause Register ExcCode Value 
CpU 


Additional State Saved 


Causecr unit number of the coprocessor being referenced 


Entry Vector Used 
General exception vector (offset 0x 180) 


4.8.21 Floating Point Exception 


A floating point exception is initiated by the floating point coprocessor to signal a floating point exception. 


Register ExcCode Value 
FPE | 


Additional State Saved 


Register State 


FCSR indicates the cause of the fl 


Entry Vector Used 
General exception vector (offset 0x180) 


4.8.22 Watch Exception 


the WatchHi and WatchLo registers. A watch exception is taken 
ster are both zero. If either bit is a one at the time that a watch 


in kernel mode. 


If the EXL or ERL bits are one in the Status register and a single instruction generates both a watch exception (which 
. is deferred by the state of the EXL and ERL bits) and a lower-priority exception, the. lower priority exception is taken. 
It is implementation dependent whether the WP bit is set in this case. The preferred implementation is to set the WP 
bit only if the instruction completes with no other exception. 


It is implementation dependent whether a data watch exception is triggered by a prefetch or cache instruction whose 
address matches the Watch register address match conditions. The preferred implementation is not to match on these 
instructions. 


Register ExcCode Value 
WATCH 
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Additional State Saved 


Entry Vector Used 
_ General exception vector (offset 0x 180) 


indicates that the watch exception was deferred 
until after both Statuspy, and Statuspp, were zero. 
This bit directly causes a watch exception, so soft- 
ware must clear this bit as part of the exception . ~ 
handler to prevent a watch exception loop at the 
end of the current handler execution. 


4.8.23 Interrupt Exception 


_ The interrupt exception occurs when one or more of the eight interrupt requests 


5 nabled by the Status registers. See 
Section 4.7 on page 87 for more information. : : a ae 


Register ExcCode Value 
Int 


“ », Mey, 


Additional State Saved 


Register State 


4.9 CPO Registers 


The CPO registers provide the interface between:the:1 A and the PRA. Each register is discussed below, with the reg- 


isters presénted in numerical order, first by register number, then by select field number. 


_ For each register described below, field descriptions include the read/write properties of the field, and the reset state 
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of the field. For the read/write properties of the field, the following notation is used: 


d/Write : : 
oe Hardware Interpretation Software Interpretation 
Notation 


R/W A field in which all bits are readable and writable by software and, potentially, by hard- 
ware. 
Hardware updates of this field are visible by software read. Software updates of this 
field are visible by hardware read. 
If the Reset State of this field is “Undefined”, either software or hardware must initial- 
ize the value before the first read will return a predictable value. This should not be 
confused with the formal definition of UNDEFINED behavior. 
A field which ts either static or is updated | A field to which the value written by soft- 
only by hardware. ware 1s ignored by hardware. Software 
may write any value to this field without 
If the Reset State of this field is either “O” | affecting hardware behavior. Software 
or “Preset”, hardware initializes this field | reads of this field return the last value 
to zero or to the appropriate state, respec- oe by hardware. 
tively, on powerup. 
If the Reset State of this field is “Unde- 
If the Reset State of this field is “Unde- fined”, software reads of this field result, 
fined”, hardware updates this field only | in an UNPREDICTABLE value except 
under those conditions specified in the ...| after a hardware update done under the 
description of the field. | conditions came in the description of 
# | the field. 


A field which hardware does not update, ie A field ae the value written by soft- 
and for which hardware can assume a ware must be zero. Software writes of 


zero value. ae -| non-zero values to this field may result in 
_ UNDEFINED behavior of the hardware. 
Software reads of this field return zero as 
long as all previous software writes are 
ZeTO. 


If the Reset State of this field is “Unde- 
fined’, software must write this field with 
zero before it is guaranteed to read as 
zero. 


4.9.1 Index Register (CP0 Register 0, Select 0) 
Compliance Level: Required for TLB-based MMUs; Optional otherwise. 


The Index register 1s a 32-bit read/write register which contains the index used to access the TLB for TLBP, TLBR, 
and TLBWI instructions. The width of the index field is implementation-dependent as a function of the number of 
TLB entries that are implemented. The minimum value for TLB-based MMUs is Ceiling(Log2(TLBEntries)). 


The operation of the processor is UNDEFINED if a value greater than or equal to the number of TLB entries is writ- 
ten to the Index register. | 


Figure 13 shows the format of the Index register, Table 59 describes the Index register fields. 
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Figure 13: Index Register 


31 30 n n-l 0 


Fields 


Description , : Reset State | Compliance 
P 31 


Probe Failure. Hardware writes this bit during Undefined Required 
execution of the TLBP instruction to indicate 
whether a TLB match occurred: 


0: A match occurred, and the Index field 
contains the index of the matching entry 

1: No match occurred and the Index field is 
UNPREDICTABLE 


TLB index. Software writes this field to provide - | Ww v “ Undefined Required 
the index to the TLB entry referenced by the a oe a | 4 
TLBR and TLBWI instructions. aos 


Reserved 


e ect On 


Sonat otherwise. 


The value.of the register varies between an upper eit iene bound as follow: 


¢ A lower bound is set by the number of TLB entries reserved for exclusive use by the operating system (the 
contents of the Wired register). The entry indexed by the Wired register is the first entry available to be writ- 
ten by a TLB Write Random operation. — a 

e An upper bound is set by the total number of TLB entries minus |. 


Within the required constraints of the upper and lower bounds, the manner in which the processor selects values for 
_the Random register is implementation-dependent. However, designers should be aware of a potential live lock condi- 
tion for implementations that simply increment the Random field every ‘n’ cycles. With such an implementation, the 
TLB/XTLB refill handler can fall into synchronization with the Random field such that the same entry is used during 
each pass through the refill handler. If the instruction causing the TLB/XTLB refill requires more than a single entry 
to complete (e.g., a load instruction requiring both an instruction and a data translation), no forward progress is made 
and a live lock condition is created. In most cases, some other event, such as an interrupt, breaks the condition. How- 
ever, if the offending instruction is executed in Kernel Mode with interrupts disabled, breaking the live lock may not 
be possible. Designers are encouraged to introduce some pseudo-random behavior on top of a counter implementa- 
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tion of the Random field, such as might be provided by, for example, an LFSR. 


The processor initializes the Random register to the upee bound on a Reset Exception, and niet the Wired register is 
written. | 


Figure 14 shows the format of the Random register; Table 60 describes the Random register fields. 


Figure 14: Random Register Format 


31 n 


n-1 0 
Random 


Table 60: Random Register Field Descriptions 


crs i 

Name | 

Random TLB Random Index YRS | Pe [TLR | ; Weawed. | 
L a Entries - 1 


Description 


| Reserved — 


d after an address error exception and some fields © 
saan 


register fields. 


63 30 29 a 65 38210 


Fields 


November 15, 1999 ° _ 07 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Table 61: EntryLo0, EntryLol Register Field Descriptions 


Write Reset State | Compliance 


Page Frame Number. Corresponds to 
bits[PABITS- 1:12] of the physical address. The 
width of this field implicitly limits the size of the 


PGndeaned | Required 
physical address to 36 bits. Ifthe processor 


implements fewer physical address bits than this 
limit, the unimplemented bits must be written as 


zero, and return zero on read. If the processor 
Undefined Required | 


Description 


implements more physical address bits that this 
limit, the PFN field boundary moves to the left, 
compressing out bits of the Fill field. 


“Dirty” bit, indicating that the page is writable. If 
this bit is a one, stores to the page are permitted. 
If this bit is a zero, stores to the page causea | . 
TLB Modified exception. a | Sew 


Kernel software may use this bit to cae Sibiehes 3 
paging algorithms that require knowing which~ "|. 
pages have been written. Tt ele as zero 


Undefined 


Required 


the virtia page mapping are vali 
one, accesses to the | page a are © pe 


R/W Undefined Required 


(TLB MMU) 


the G bits fon both Entzi.o0 and EntryLol 
becomes the G bit in the TLB entry. If the TLB 
entry G bit is a one, ASID comparisons are 
ignored during TLB matches. On a read from a 
TLB entry, the G bits of both EntryLoO and 
EntryLol reflect the state of the TLB G bit. 


Table 62 lists the encoding of the C field of the EntryLo0 and EntryLo! registers and the KO field of the Config regis- 
ter. An implementation may choose to implement a subset of the cache coherency attributes shown, but must imple- 

- ment at least encodings 2 and 3 such that software can always depend on these encodings working appropriately. In 
other cases, the operation of the processor is UNDEFINED if software specifies an unimplemented encoding. 


November 15, 1999 | 2 - 108 - 


MIPS® PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTL ALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Table 62 lists the required and optional encodings for the coherency attributes, in addition to giving an historical per- 
spective on the encodings implemented by various MIPS processors, as obtained from the processor chip specifica- 
tion. 


Table 62: Cache Coherency Attributes 


am Cache Coherency Attributes : 
Cio2) xetue With Historical Usage 


Optional 


Available for implementation dependent use 


Historical usage: 
e Reserved (R4000®, VR5400, R1O000®) - 

¢ Unused, defaults to cached (R4300™) 

e Cacheable, noncoherent, write through, no write 
allocate (RC32364, RM5200) 


Available for implementation dependent use 


Historical usage: 
e Reserved (R4000) 
¢ Unused, defaults to cached (4300) 
*  Cacheable, noncoherent, write through, es allo- 
. cate (RC32364, eee “Tees 


I 
_ 
3 


Required 


Historical usage: 
Cacheable 


Required 


Historical usage: | 

° Cacheable ne 
R10000) 

a Cached (R4300) 
: noncoherent (writeb ack) (R eee 


is } herent (rioncoherent) (R4000, 


REs300) : 
* Cacheable, writeback (VR5400) 


Available for implementation dependent use Optional 


Historical usage: 

¢  Cacheable coherent exclusive (exclusive) (R4000, 
R10000) 

¢ ~ Unused, defaults to cached (R4300) 

e Reserved (RC32364, RM5200, VR5400) 
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Available for implementation dependent use oo 4 
Historical usage: 
e  Cacheable coherent exclusive on write etonatavie) 
(R4000, R10000) : 
* Unused, defaults to cached (R4300) it” 
e Reserved (RC32364, RM5200, VR5400) 
Available for implementation dependent use 


Optional 


Table 62: Cache Coherency Attributes 


; Cache Coherency Attributes 
Coe yee With Historical Usage 
5 


qd 


4.9.4 Context a (CPO Register « 4% 
Compliance Level: Required for TLB-based MMUs 


Historical usage: 
¢ Cacheable coherent update on write (update) 
(R4000) 
* Unused, defaults to cached (R4300) = 
© Reserved (RC32364, RM5200, R10000) ~ 


Available for implementation dependent use” 


Historical usage: : 
¢ Reserved (R4000) ee. 
¢ Unused, defaults to cached (84300), : 
¢ Reserved (RC32364, RM5200). > 

e Uncached accelera d (VR5400, R 10000) 


; Optic otherwise. 


The Context register is a read/write register containin a pointer to an entry in the page table entry (PTE) array. This 
array is an Operating system data structure that stores virtual-to- -physical translations. During a TLB miss, the operat- 
ing system loads the TLB with the missing ‘translation from the PTE array. The Context register is primarily intended 
for use with the TLB Refill handler, but i is also loaded by hardware on an XTLB Refill and may be used by software 
in that handler. The Context register duplicates of the information provided in the BadVAddr register, but is 
organized in such a way that the operating system can directly reference a 16-byte structure in memory that describes 
‘the mapping. | 


A TLB exception (TLB Refill, XTLB Refill, TLB Invalid, or TLB Modified) causes bits VA3}.;3 of the virtual address 


. to be written into the BadVPN2 field of the Context register. The PTEBase field is written and used by the operating 
system. 


The BadVPN2 field of the Context register is not defined after an address error exception and this field may be modi- 
fied by hardware during the address error exception sequence. 


Processor implementations must not assume that software will write the same value into the PTEBase fields of the 
Context and XContext registers (i.e., the PTEBase fields of the two registers may be set to different values, thus can- 
not share storage). 


Figure 16 shows the format of the Context Register; Table 63 describes the Context register fields.’ 


November 15, 1999 -110- 


MIPS® PROPRIETAR Y/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


Figure 16: Context Register Formats 


63 23°«222 4 3 0. 


PTEBase Bad VPN2 ae 


Table 63: Context Register Field Descriptions 


F adenued | Pearen 


PTEBase 


Description 


| 63:23 | This field is for use by the operating system 
and is normally written with a value that 
allows the operating system to use the Context 
Register as a pointer into the current PTE 
array in memory 


Required 


- Reserved 


BadVPN2 


mask that sets the variable page size for each: TLB entry, “2 show in Table 65. Figure 17 shows the format of the 
pa register; Table 64 describes the PageMag, as fields. - 


Table 64: PageMask Register Field Descriptions 


oe ~| Reset State | Compliance 
Mask 24:13. | The Mask field is a bit mask in which a “1” bit RW Undefined Required 
indicates that the corresponding bit of the virtual 
address should not participate in the TLB match. 
12:0 | 
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Table 65: Values for the Mask Field of the PageMask Register 


me Lo 

===> [ol [eps [e le 
Ea CO CO OOo 
jisxpyes fo |o [o jo jo fo |o [jo jo fo |i fi 
jeiKpyes fo jo [o jo jo jo fo fo ft ft ft ft 
rsexpyes [0 |o |o jo fo fo ft ji [i [i fa [a 
pimpye fo fo fo fo ft fe fe fe fe ft ft 
pampye fo fo ft [i ft ft fa ft ft ttt 
eee a a 


by a processor, a read of the PageMask register must return zeros in all bits that correspond to encodings that are not - 
implemented. Software can determine which page sizes are supported by’ writing the encoding for a 16MB page to the 
PageMask register, then examine the value returned from a read of the PageMask register. If a pair of bits reads back 
as ones, the processor implements that page size. The operation of the processor’ is UNDEFINED if software loads 
the PageMask register with a value other than one of those listed i i Table 65. 


4.9.6 Wired eoael (CPO Register 6, pele 


to its upper bound 


The operation of the processor is UNDEFID 
ten to the Wired register. 


Figure 19 shows the format of the Wired register: "Table 66 describes the Wired register fields. 
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Figure 18: Wired And Random Entries In The TLB 


Entry TLBSize-1 


Wired Register 


Fields 


| rriptic ; ; Reset State | Compliance 


4.9.7 BadVAddr Register (CPO Register 8, 8, Select 0) 


Compliance Level: Required. 


The BadVAdadr register is a read-only register that captures the most recent virtual address that caused one of the fol- 
lowing exceptions: 


e Address error (AdEL or AdES) 
¢ TLB/XTLB Refill 

¢  TLB Invalid (TLBL, TLBS) 

¢  TLB Modified 


The BadVAddr register does not capture address information for cache or bus errors, or for Watch exceptions, since 
none is an addressing error. 


Figure 20 shows the format of the BadVAddr register; Table 67 describes the BadVAddr register fields. 
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Figure 20: Bad VAddr Register Format 
63 | 0 
Bad VAddr 


Table 67: BadVAddr Register Field Descriptions 


| Fields Read/ 
Description : Reset State | Compliance 
eee “ 
Name 


Bad VAddr PBadVAddr | 63:0 | Badvirualaddress Bad virtual address | R | Undefined | Undefined 


4.9.8 Count Register (CP0 Register 9, Select 0) 


Compliance Level: Required. 


The Count register acts as a timer, incrementing at a constant rate, whether or not an instruction is executed, retired, 
or any forward progress is made through the pipeline. The rate at which the counter increments 1S implementation- 
dependent, and is a function of the frequency of the processor, not the i issue width of the processor. The preferred : 
implementation is to increment the Count register once per processor cycle. | 


It is implementation dependent whether the Count register continues to count or r stops when the processor enters a 
low power mode, as might occur after executing the Wait instruction. | 


The Count register can be written for functional or ‘diagnostic purposes, including at reset or to synchronize proces- 
SOrs. | 


Figure 21 shows the format of the Count register; T. ble 68 describes the eee register fields. 


Figure 21: Coun Re a 


31 ele 
Count 


Table 68: Count Register Field Descriptions 


— 7 Description 


4.9.9 EntryHi Register (CP0 Register 10, Select 0) 
Compliance Level: Required for TLB-based MMU; Optional otherwise. 


The EntryHi register contains the virtual address match information used for TLB read, write, and access operations. 


A TLB exception (TLB Refill, XTLB Refill, TLB Invalid, or TLB Modified) causes the bits of the virtual address cor- 
responding to the R and VPN2 fields to be written into the EntryHi register. The ASID field is written by software 
with the current address space identifier value and is used during the TLB comparison process to determine TLB 
match. 
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Software may determine the size of the virtual address space implemented by a processor by writing all ones to the 
EntryHi register and then reading the value back. 


The VPN2 and R fields of the EntryHi register are not defined after an address error exception and these fields may be 
modified by hardware during the address error exception sequence. Software writes of the EntryHi register (via 
MTCO or DMTCO) do not cause the implicit write of address-related fields in the BadVAddr, Context, or XContext 
registers. 


Figure 22 shows the format of the EntryHi register; Table 69 describes the EntryHi register fields. 


Figure 22: EntryHi Register Format 


63 62 61 40 39 13412 8 7 0 


eld 


Table 69: EntryHi Register Field Descriptions 


sb its d : Complianc 
Description Pity ‘, : 


63:62 | Virtual memory region, corresponding to VA¢3.¢ 2. /W.| Undefined | Required 

_ 00: xuseg: user address region . o 

Ol: xsseg: supervisor addressregion. © © fo OS a a 
If supervisor mode is not implemented, 6 
| this encoding is reserved. S at 
10: Reserved | | a 
tion or on a TLB read, and is written by software 
before a TLB write. =. 


61:40 | Fill bits reserved for expansion’ of the virtual 


address space. See below. Returns ZeTOS on read, 
39:13 | VA39.;3 of the virtu R/W | Undefined | Required 

TLB ie orona TLB a and is written by 
software before a TLB write. The default width of 
this field implicitly limits the size of each virtual 
address space to 40 bits. If the processor imple- 
ments fewer virtual address bits than this default, | 

the Fill field must be extended to take up the 


Required 


ignored on write. 

unimplemented VPN2 bits. If the processor imple- 
ments more virtual address bits than this default, 
the VPN2 field must be extended to take up some 
or all of the Fill bits. 
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Table 69: Entry Hi Register Field Descriptions 


Ic 
against which TLB references match each mye 


ASID 7:0 
TLB ASID field. 


fo | 128 Must be written as zero; returns zero on read. ey oe Reserved 


Read/ Reset 


Complianc 
Write State 


e 


Description 


R/W Undefined 


Address space identifier. This field is written by Required 
hardware on a TLB read and by software to estab- (TLB 
lish the current ASID value for TLB write and MMU) 


4.9.10 Compare Register (CPO Register 11, Select 0) 
Compliance Level: Required. 


The Compare register acts in conjunction with the Count register to implement. a timer and timer aneole function. 
_ The Compare register maintains a stable value and does not change oni own. oo 


When the value of the Count register equals the value of the Compare register, an interrupt request is combined in an 


implementation-dependent way with hardware interrupt 5 to set interrupt bit IP(7) i in the Cause register, This causes 
an interrupt as soon as the interrupt is enabled. 


For diagnostic purposes, the Compare register is a read/write register: _In 
write-only. Writing a value to the Compare register, as asi 
format of the Compare register, Table 70 describes the ' 


mal use however, the Compare eoisiet is 
e effect, clears the timer interrupt. Figure 23 shows the 
are register fields. - 


Figure 23: Compare Register Format 


31 
Compare 


10: C mpare Register Field Descriptions 
Fields 


al Reset State | Compliance 
p Name | Bis | iad 
Name 


[Compare | 31:0 [nerve count compare value | Interval count compare value [RW | Undefined Undefined 


4.9.11 Status Register (CP Register 12, Select 0) 


~ Compliance Level: Required. 


Decstagie 


The Status register is a read/write register that contains the operating mode, interrupt enabling, and the diagnostic 
states of the processor. Fields of this register combine to create operating modes for the processor. Refer to Section 
4.4 on page 71 and Section 4.7 on page 87 for a discussion of operating modes and interrupt enable, respectively. 


_ Figure 24 shows the format of the Status register; Table 71 describes the Status register fields. 
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Figure 24: Status Register Format 


28 27 26 24 232 «22)—COo21 2019 S18 17-16 15 


cos-cuerlralaelfpxppesftssifind of noi] orawo _feofsxfunferofencfexc]ie 
_KSU 


Table 71: Status Register Field Descriptions 


pies Read/ 
Description Write Reset State | Compliance 


| Name 


£3 eee access to coprocessors 3, 2, 1, and 0, Undefined | Required for 


respectively: all imple- 
QO: access not allowed mented 
l: access allowed coprocessors 


Coprocessor 0 is always usable when the processor 
is running in Kernel Mode or Debug Mode, inde-. : 
pendent of the state of the CU bit. ee 


Execution of all floating point instructions, includ- 
ing those encoded with the COP! X opcode,-is. con- 
trolled by the CUL enable. CU3 is not currently 
used by MIPS64 implementations and i 1s ecaed: 
for future use by the Architecture. 


If there is no provision for. cting a coproces- 
sor, the corresponding CU bit must be ignored on 
write and read as zero. “However, for backward 
compatibility with earlier MIPS. processors, CU3 
may be implemented asa read/write bit, even 
though its.state does not t affect t os operation of the 


processor. 


Optional 


Enables reduced power mode on'some implementa- 
tions. The specific operation. of this bit is imple- 
mentation dependent. 


If this bit is not implemented, it must be ignored on 
write and read as zero. If this bit is implemented, 
the reset state must be zero so that the processor 
starts at full performance. 
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Table 71: Status peices Field Descriptions 


Se a 


von 
Description Reset State Compliance 
ne [oe 


Rw | igadenned | Required 


| ‘Undefined Optional 


Controls the floating point register mode: 
0: Floating point registers can contain any 
32-bit datatype. 64-bit datatypes are stored 
in even-odd pairs of registers. 
1: Floating point registers can contain any 
datatype 


Certain combinations of the FR bit and other state 
or operations can cause UNPREDICTABLE 

behavior. See Section 4.5.3 on page 72 for a discus- 
sion of these combinations. 


Used to enable reverse-endian memory references 

while the processor is running in user mode: 
0: User mode uses configured endianness | 

1: User mode uses reversed endianness 


Neither Keni Mode nor Supervisor Mode refer- Shee 
ences are affected by the state ofthis bit, © 


If this bit is not implemented, it must be 
write and read as zero. 


padeuned Optional 
Undefined Required 
I: 64. bit operations are ‘ 


Controls the location of exc tion vectors: R/W Required 
r ip eee . | 
See Section 4.8.2 on page 91 for details. | 
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Table 71: Status Register Field Descriptions 


Description Reset State | Compliance 


Write 


Indicates that the TLB has detected a match on 
multiple entries. It is implementation dependent 
whether this detection occurs at all, on a write to 
the TLB, or an access to the TLB. When such a 
detection occurs, the processor initiates a machine 
check exception and sets this bit. It is implementa- 
tion dependent whether this condition can be cor- 
rected by software. If the condition can be 
corrected, this bit should be cleared before resum- 
ing normal operation. 


Required if 
TLB Shut- 
down is 
implemented 


If this bit is not implemented, it must be ignored on 
write and read as zero. 


Software writes to this bit may not cause a 0-to-1 » 
transition. Hardware may ignore software attempts _ 
to cause such a transition. Spe 


Required if 
Soft Reset is 
implemented 


1 for Soft 
Reset; 0 
otherwise 


Indicates that the entry through the reset exception 
vector was due to a Soft Reset: 
0: Not Soft Reset (NMI or Reset) 

1: Soft Reset 2 


1 for NMI; 
O otherwise 


Required if 
NMI is 
implemented 


Indicates that the entry through the reset exception 
vector was due to an NMI. : : 
O: Not NMI (Soft — or Reset) 
1: NMI 


Must be written as ZEIO; returns zero on read. 


. Undefined Optional 


Reserved 
for 
Imple- 
menta- 
tions 


These bits are iniplementation dependent and not - 
defined by the architecture. If they are not imple- 


mented, they must be ignored on 1 write and read as 
zero. : 


IM 15:8 | Interrupt Mask: Controls the enabling of each of the 
external, internal and software interrupts. Refer to 
Section 4.7 on page 87 for a complete discussion of 
enabled interrupts. 

QO: interrupt request disabled 


1: interrupt request enabled 


7 
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Table 71: Status Register Field Descriptions 


Read/ 
Write 


Description Reset State | Compliance 


Enables the following behavior: Undefined 
e Access to 64-bit Kernel Segments | 
e . Use of the XTLB Refill Vector for refer- 


ences to Kernel Segments 


Required for 
64-bit 
Addressing 


0: Access to 64-bit Kernel Segments disabled, 
TLB Refill Vector used for references to 
Kernel Segments 

1: Access to 64-bit Kernel Segments enabled, 

XTLB Refill Vector used for references to 

Kernel Segments 


If 64-bit addressing is not implemented, this bit 
must be ignored on write and read as zero. 


Required if 
both Super- 
avisor Mode 
and 64-bit 
addressing 
are imple- 
mented 


If Supervisor Mode is implemented, enables the | ae a “Undefined 
following behavior: oe 
¢ Access to 64-bit Supervisor Segments. 
« Use of the XTLB Refill Vector for refer-_ 
ences to Supervisor Segments © ie 


fited, it is imple- 
r-access to what would 
normally be 64-bit supervi sor address space is 
enabled with the SX or KX bit. 3 


If 64-bit addressing is not iii@lemented, this bit 
must be ignored on write and read as zero. 
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Table 71: Status Register Field Descriptions 


Description : Reset State | Compliance 
Write 
Eacs 


Undefined | Required for 
64-bit 


Addressing 


Enables the following behavior: 
¢ Access to 64-bit User Segments 
e Use of the XTLB Refill Vector for refer- . 
ences to User Segments 
e Execution of instructions which perform 
64-bit operations while the processor is 
operating in User Mode 


0: Access to 64-bit User Segments 
disabled, TLB Refill Vector used for 
references to User Segments, execution 
of instructions which perform 64-bit 
operations is disallowed while the processor 
is running in User Mode 

: Access to 64-bit User Segments 
enabled, XTLB Refill Vector used for 
references to User Segments, execution 
of instructions which perform 64-bit 
operations is allowed while the proc 

is running in User Mode 


oer 


If 64-bit addressing is not implemented, this bit 
must be ignored on write an read a 


KSU Undefined Required if 
Supervisor 
Mode is 
imple- 
mented; 
00>: Base mo Optional 
oe Base mode is. $ otherwise 
Llp: Reserved. The operatior ‘ot the processor 
is UNDEFINED if this value is written 
to the KSU field 
Note: This field overlaps the. UM and RO fields, 
described below. 
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Table 71: Status Register Field Descriptions 


Description Reset State | Compliance 
a 
Name 
UM 4 


Fadcaned. | Fameurer | 


If Supervisor Mode is not implemented, this bit 
denotes the base operating mode of the processor. . . 
See Section 4.4 on page 71 for a full discussion of 

operating modes. The encoding of this bit is: 


OQ: Base mode is Kernel Mode 
1: Base mode is User Mode 


Note: This bit overlaps the KSU field, described 
above. 


If Supervisor Mode is not implemented, this bit is Reserved 
reserved. This bit must be ignored on write and 


read as zero. 


Note: This bit overlaps the KSU field, desciibe 
above. 


Error Level; Set by the processor when a Reset, ‘|, Required 
Soft Reset, NMI or Cache Error ExXCepue are 
taken. 

0: normal level 


1: error level 


When ERL is set: 


useg are treated as. . 
shed region. See 


processor 1s aie INED if the ERL bit 
is set while the processor is executing 
instructions from kuseg. 
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Table 71: Status Register Field Descriptions 


Fields Read/ 
Description : Reset State | Compliance 
; Write 
Name Bits 


I 


Exception Level; Set by the processor when any Undefined Required 
exception other than Reset, Soft Reset, NMI or 
Cache Error exception are taken. 

0: normal level 


1: exception level 


When EXL is set: 

e The processor is running in Kernel Mode 

e Interrupts are disabled. 

e TLB/XTLB Refill exceptions will use the 
general exception vector instead of the 
TLB/XTLB Refill vectors. 

¢ EPC and Causepp will not be updated if 


another exception is taken 


of 


Interrupt Enable: Acts as the master enable for soft 

ware and hardware interrupts: 
0: disable interrupts © 

1: enables interrupts 


"Un de fine d Required 


a 
4.9.12 Cause Register (CPO Register 13, S 


Compliance Level: Required. 


10st recent exception. In addition, fields also control software 


The Cause register primarily describes the cause 0 : 
upts are dispatched. With the exception of the IP[1:0], IV, and 


describes the Cause register fields. 
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Figure 25: Cause Register Format 


31 30 29 24 23 22 21 


8 7 6 2 1 O 
polo] [0 fpf 0 [ wa J ofewecue Jo 


Table 72: Cause Register Field Descriptions 


Description Reset State | Compliance 
Name | Bi “ 
Name 
BD 31 


 ondcnaed. 


Indicates whether the last exception taken 
occurred in a branch delay slot: 


Required 


0: Not in delay slot 
1: In delay slot 


The processor updates BD only if Statuspyy7, 


was zero when the exception occurred. 


Coprocessor unit number referenced when a 
Coprocessor Unusable exception is taken. This 
field is loaded by hardware on every exce tion, 
but is UNPREDICTABLE for all excep 
except for Coprocessor Unusable. 


Undefined 


Required 


Indicates whether an interrupt exc Undefined Required 


Required if 
watch regis- 
ters are 
‘implemented 


Undefined | 


bit both indicates that the watch exceniion was 
deferred, and causes theexc tion to be initi- 
ated once Statuspy, and Statusep; are both 


zero. As such, software must clear this bit as 
part of the watch exception handler to Prevents a 
watch eae loop... . | 


SéRwaie: writes to this bit may not cause a 0-to- 
1 transition. Hardware may ignore software 
attempts to cause such a transition. 


If watch registers are not implemented, this bit 
must be ignored on write and read as zero. 
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- 


Undefined Required 


Reserved - 


Table 72: Cause Register Field Descriptions 


ake Description oe 
P Write 
9: Request software interrupt | 


Name 
i 
R/W 
8: Request software interrupt 0 
30 , 


Indicates an external interrupt is pending: 


15: Hardware interrupt 5, timer or 

performance counter interrupt 
14: Hardware interrupt 4 
13: Hardware interrupt 3 
12: Hardware interrupt 2 
11: Hardware interrupt 1 
10: Hardware interrupt 0 


Controls the request for software interrupts: 


mld 


> a 
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Table 73: Cause Register ExcCode Field 


: 
= 


Description 


— 
oa 
: 
Pa 
© 
a?) 


—" 
- 
ps 
~] 
an) 
ws 
— 
> 
co 
Pa 
ay 
—" 


Reserved 


19-22 Ox 13-0x 16 
Reference to WatchHi/WatchLo address 


Machine check 


Reserved 


Cache error. In not che error exception has‘a 


on Data. This exception code was 
ed here only for historical per- 


Compliance Level: Required. | a 
r that contains the address at which processing resumes 


The Exception Program Counter (EPC , f the adaress: , 
KL bi egister are significant and must be writable. 


after an exception has been serviced. A 


For synchronous (precise) exceptions, EPC 


¢ the virtual address of the instruction that.was the direct cause of the exception, or 
e the virtual address of the immediately preceding branch or jump instruction, when the exception causing 
instruction is in a branch delay slot, and the Branch Delay bit in the Cause register is set. 


For asynchronous (imprecise) exceptions, EPC contains the address of the instruction at which to resume execution. 
The processor does not write to the EPC register when the EXL bit in the. Status register is set to one. 


Figure 26 shows the format of the EPC register; Table 74 describes the EPC register fields. 
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Figure 26: EPC Register Format 


EPC 
Table 74: EPC Register Field Descriptions 


Fields Read/ 
Description . Reset State 
| Name | Bits in 
Name 


perc | 630 | Exception Program Counter | RW | Undefined Gadenaed 


4.9.14 Processor Identification (CP0 Register 15, Select ee 


Compliance Level: Required. | 


Compliance 


The Processor Identification (PRId) register is a 32 bit read-only peeisigs that contains information identifying the 
manufacturer, manufacturer options, processor identification and revision level of th rocessor. Figure 27 shows the 
format of the PRid register; Table 75 describes the PRid register fields. | 


“Me 


. Figure 27: PRId Register Format 


31 24 23 16 15 


Fields sits, 
ae Read/ 
Wri te Reset State | Compliance 


Company Pees | F Optoma | 
Options comp : 

The value in cid is not ot specified by the 

architecture. If this field i is not implemented, it : 

must read as zero. * | 
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Table 75: PRId Register Field Descriptions 


Fields 


Company 23:16 
ID 


Processor 15:8 
ID 


4.9.15 Configuration Recuter (CPO Register 16, Select 0) 


Compliance Level: Required. 


Description : Reset State | Compliance 


Preset 


Identifies the company that designed or manu- Required 


factured the processor. 


Software can distinguish a MIPS32 or MIPS64 
processor from one implementing an earlier 
MIPS ISA by checking this field for zero. If it 
is non-zero the processor implements the 
MIPS32 or MIPS64 Architecture. 


Company IDs are assigned by MIPS Technolo- 
gies when a MIPS32 or MIPS64 license is 
acquired. The encodings in this field are: 


0: Not a MIPS32 or MIPS64 processor 

l: MIPS Technologies, Inc. ee 
2-255: Contact MIPS Technologies, Inc. { 
the list of CompanyID assignment 


Required 


Preset 


Identifies the type of processor. This field 
allows software to distinguish betwer vari 


CompanyID and Proce 7 
unique number assigned tt 
PoE enn non > - 


R Preset 


Optional 


? 


it must read < 


The Config register specifies various configuration and capabilities information. Most of the fields in the Config regis- 
ter are initialized by hardware during the Reset Exception process, or are constant. One field, KO, must be initialized 
by software in the reset exception handler. 


Figure 28 shows the format of the Config register; Table 76 describes the Config register fields. 


ae es 
y, * oy 
1 
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Figure 28: Config Register Format 


31 30 16 15 141312 109 7 


6 3 2 0 
M]__Racnediorinpenenatow BA At] ae|wr] 0 | RO. 


Table 76: Config Register Field Descriptions 


Description : Reset State | Compliance 
, Write 
M 31 Denotes that the Config! register is implemented Preset Required 
at a select field value of 1. 
30:16 | This field is reserved for implementations. Refer Undefined Optional 
to the processor specification for the format and | 
definition of this field apd. 


BE Indicates the endian mode in which the processor Preset or Required 


is running: 
0: Little endian 
1: Big endian 


Set 


Architecture type implemented by the processor: Preset “Required 
0: MIPS32 i 
1: MIPS64 with 32-bit addresses only 

2: MIPS64 with 32/64-bit a 


3: Reserved 


Architecture revision leve Preset Required 
0: Revision 1 : 
1-7: Reserved 
Preset Required 


: Reserved 
: Reserved 
: Reserved 
: Reserved 


KO 2:0 Kseg0 coherency algorithm. See Table 62 forthe | R/W | Undefined? Optional 
encoding of this field. 
Must be written as zero; returns zero on read. } 0 | 0 | Reserved 


a. It is strongly recommended that the KO field be initialized by hardware to a value that would allow the pro- 
cessor to operate correctly even if software references ksegO before initializing this value. The suggested 
value is the uncached encoding of 2. Some operating systems have been seen to reference kseg0 before 
initializing the KO field, causing processors who do not initialize the KO field at reset to hang during boot. 
While this is certainly a software error, having to debug such errors during boot of a new processor may 
easily justify the minimal hardware necessary to initialize the KO field at reset. 


aa 
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4.9.16 Configuration Register 1 (CPO Register 16, Select 1) 


Compliance Level: Required. 
The Config! register is an adjunct to the Config register and encodes additional capabilities information. All fields in 
the Config/ register are read-only. 


The Icache and Dcache configuration parameters include encodings for the number of sets per way, the line size, and 
the associativity. The total cache size for a cache ts therefore: 


Associativity * Line Size * Sets Per Way 
If the line size is zero, there is no cache implemented. 


Figure 29 shows the format of the Config] register; Table 77 describes the Config/ register fields. 


Figure 29: Config] Register Format 


31 30 25 24 2221 1918 16 15 1312 10 


LE MEADE BE SEIRE 2 


Fields 
Reset State | Compliance 


Preset Required 


ture, writes to this bit must be 4 
must read as zero. 


Preset Required 


to 64 TLB entries. The value zero i: 
Configwr having a a vate of ‘none’. 


Preset Required 


: Reserved 


Icache line size: Preset Required 
0: No Icache present 

1: 4 bytes 
2: 8 bytes 

3: 16 bytes 
4: 32 bytes 
5: 64 bytes 
6: 128 bytes 
7: Reserved 
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Table 77: Config1 Register Field Descriptions 


Description oF i t Reset State | Compliance 
Name Bits ss 
6-way 


IA 18:16 
7-way 
R 


Icache associativity: 
0: Direct mapped 

2-way 

3-way 

4-way 

5-way 


Si ae eh ee 


Preset Required 
8-way 
DS 15:13. | Dcache sets per way: Preset Required 
0: 64 
| : 128 eo |. 
: 256 4 
> 912 | | co . a 
| : 1024 ’ E 
: 2048 . 
: 4096 | : | a 
: Reserved “te. 


1: 4 bytes 
2: 8 bytes 
3: 16 bytes 
4: 32 bytes 
5: 64 bytes 
6: 128 bytes 
7: Reserved 


DL 12:10 | Dcache line size: Preset Required 
| 0: No Deache present 


| - 
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Dcache associativity: Required 


LEAs 


0: Direct mapped 


Performance Counter registers implemented: 
QO: No performance counter registers 
implemented 
1: At least one performance counter register 
implemented 
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Table 77: Config1 acai Field Descriptions 


Read/ 
hed bk 
iniind 

R 


Fields 


Description Compliance 


Watch registers implemented: 
0: No watch registers implemented 
1: At least one watch register implemented 


Code compression (MIPS16) implemented: 
0: No code compression 
1: Code compression 


EJTAG implemented: 
0: No EJTAG implemented 
1: EJTAG implemented 


Preset Required 


FPU implemented: 
0: No FPU 
1: FPU 


Reserved 


t 


4.9.17 Load Linked Address (CPO Register 17, Select 0 


Compliance Level: peeone 


This register is implementation dependent and for dia 
operation. 


Figure 30: L ddr Register Format ae: 


Table 78: LLAddr Register Field Descriptions 


Description . Reset State | Compliance 
: Write 


PAddr 63:0 | This field encodes the physical address read by Undefined Optional 
the most recent Load Linked instruction. The for- 
mat of this register is implementation-dependent, —— 
and an implementation may implement as many ee 
of the bits or format the address in any way that it | 
| finds convenient. | 


4.9.18 WatchLo Register (CP0 Register 18) 


Compliance Level: Optional. 
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The WatchLo and WatchHi registers together provide the interface to a watchpoint debug facility which initiates a 
watch exception if an instruction or data access matches the address specified in the registers. As such, they duplicate 
some functions of the EJTAG debug solution. Watch exceptions are taken only if the EXL and ERL bits are zero in 
the Status register. If either bit is a one, the WP bit is set in the Cause register, and the watch exception is deferred 


until both the EXL and ERL bits are zero. 


An implementation may provide zero or more pairs of WatchLo and WatchHi registers, referencing them via the 
select field of the MTCO/MFCO and DMTC0/DMFCO instructions, and each pair of Watch registers may be dedicated 
to a particular type of reference (e.g., instruction or data). Software may determine if at least one pair of WatchLo and 
WatchHi registers are implemented via the WR bit of the Config/ register. See the discussion of the M bit in the 
WatchHi register description below. 

The WatchLo register specifies the base virtual address and the type of reference (instruction fetch, load, store) to 
match. If a particular Watch register only supports a subset of the reference types, the unimplemented enables must be 
ignored on write and return zero on read. Software may determine which enables are supported by a particular Watch 
register pair by setting all three enables bits and reading them back to see which ones were actually set. 


It is implementation dependent whether a data watch is triggered by a prefetch or a cache instruction whose address 
matches the Watch register address match conditions. The preferred ene is not to match on these instruc- 
tions. 
Figure 31 shows the format of the WatchLo register; Table 79 describes the WatchLo fetistes fields. 


Figure 31: WatchLo Register Fo 


q a 2  T. Dewe 
VAddr FT| R] w 


Table 79: WatchLo 
fa Mak -_ 


_ Optional 


63 


_ 
Pe 
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Description 


| 63:3. | This field specifies:the vi dress to match. 
Note that this is: doubleword address, since bits 
[2:0] are used:to control. the ty pe of match. 


If this bit is one, watch exceptions are enabled 
for instruction fetches that match the address and 
are actually issued by the processor (speculative 
instructions never cause Watch exceptions). 


If this bit is not implemented, writes to it must be 
ignored, and reads must return zero. 


If this bit is one, watch exceptions are enabled Optional 


for loads that match the address. 


If this bit is not implemented, writes to it must be 
ignored, and reads must return zero. 


Revision 1.0 | | MIPS64™ Specification 
Table 79: wate Register Field Descriptions 


Hare] Read/ ; 
Descripti 
cription Write Reset State 


Yo) Ce this Mig thig itis One: Walemexcccuoheaieenabiad. is one, watch exceptions are enabled Optional 
for stores that match the address. 


Compliance 


If this bit is not implemented, writes to it must be 
ignored, and reads must return zero. 


4.9.19 WatchHi Register (CP0 Register 19) 


Compliance Level: Optional. 


The WatchLo and WatchHi registers together provide the interface to a watchpoint debug facility which initiates a — 
watch exception if an instruction or data access matches the address specified in the registers. As such, they duplicate 
some functions of the EJTAG debug solution. Watch exceptions are taken only. if the EXL and ERL bits are zero in 
the Status register. If either bit is a one, the WP bit is set in the Cause register, and the, watch exception 1S os 
until both the EXL and ERL bits are zero. ae 


An implementation may provide zero or more pairs of WatchLo an 
select field of the MTCO/MFC0 and DMTCO/DMFCO instructions, es 


chHi registers, referencing them via the 
ir a Nadie registers: may be dedicated | 


egister Format 


31 30 29 24 23 i211 


Mo [am |e | wax ‘| 


Table 80: WatchHi Register Field Descriptions 


| _ Description ; Reset State | Compliance 
. Write 
M 31 


If this bit is one, another pair of WatchHi/ Preset Required 
WatchLo registers is implemented at a MTCO or . 
MECO select field value of ‘n+J’ | 
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Table 80: WatchHi Register Field Descriptions 


Description : Reset State | Compliance 
Write 


30s dE this bit is one, any address that matches that R/W Undefined Required 
specified in the WarchLo register will cause a 
watch exception. If this bit is zero, the ASID field 
of the WatchHi register must match the ASID 
field of the EntryHi register to cause a watch 
exception. 


ASID value which is required to match that in the 
EntryHi register if the G bit is zero in the 
WatchHi register. 


R/W Undefined Required 


Optional bit mask that qualifies the address in the Undefined Optional 
WatchLo register. If this field is implemented, 

any bit in this field that is a one inhibits the corre- 
sponding address bit from participating in oe 


address match. 


If this field is not implemented, writes to it must 
be ignored, and reads must retum zero. =. 


Software may determine how many masicbieziae op 
implemented by writing ones | is field and 
then reading back the result 


Reserved 


Must be written as zero; retur 


4.9.20 XContext Register (CPO Register 20 Salect 0) 


Compliance Level: Required for 64-bit TLB-based MMUs. ‘Optional otherwise. 


The XContext register is a read/write regis ntaining a pointer to an entry in the page table entry (PTE) array. This 
array is an operating system data structure that stores virtual-to-physical translations. During a TLB miss, the operat- 
ing system loads the TLB with the missing translation from the PTE array. The XContext register is primarily 
intended for use with the XTLB Refill handler, but is also loaded by hardware on a TLB Refill. However, it is unlikely 
to be useful to software in the TLB Refill Handler. The XContext register duplicates some of the information provided 
in the BadVAddr register, but is organized in such a way that the operating system can directly reference a 16-byte 
structure in memory that describes the mapping. | 


A TLB exception (TLB Refill, XTLB Refill, TLB Invalid, or TLB Modified) causes bits 63:62 of the virtual address 
to be written into the R field and bits SEGBITS-1:13 of the virtual address to be written into the BadVPN2 field of the 
XContext register. The PTEBase field is written and used by the operating system. ee 


The BadVPN2 field of the Context register is not defined after an address error exception and this field may be modi- 
fied by hardware during the address error exception sequence. 


Processor implementations must not assume that software will write the same value into the PTEBase fields of the 
Context and XContext registers (i.e., the PTEBase fields of the two registers may be set to different values, thus can- 
not share storage). 


Figure 33: shows the format of the XContext register; Table 81: describes the XContext register fields. In Figure 33, 
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bit numbers above the figure use the symbol SEGBITS; bit number under the oe assume that SEGBITS nas the 
value 40. 


Figure 33: XContext Register Format 


SEGBITS-13+6 | 
SEGBITS-1343 
os “a is ee A 
[rite dR] BPR | 0 


63 33 32 31 30 4 3 0 


Table 81: XContext Register Fields 


Description Compliance 


63 : — This field is for use by the operating sys-. |.R 


tem and is normally written with a value : 
that allows the operating system to. use. the 


Context Register as a pointer into th cur: 


TPTEBase | 
rent PTE array in memory 


SEGBITS-13+5: | The Region field contains bits 63:62 of. | Undefined | Required 
SEGBITS-13+4 the virtual address. “ 
OO = xuseg | 
(32:31 assuming - ; : suipervisor address region. 
SEGBITS is 40) i : | 
(30:4 assuming 


BadVPN2 SEGBITS-13+3 : 4 Undefined | Required 
SEGBITS is 40) é 


4.9.21 Reserved for Implementations (CPO Register 22, all Select values) 


Undefined | Required 


fos re, 
1 skyet 


(63:33 assuming 
SEGBITS is 40) 


that pieced: 


Must be written as Zero; retums zero on 
read. 


Compliance Level: Optional: Implementation Dependent. 


CPO register 22 is reserved for implementation dependent use and is not defined by the architecture. 


4.9.22 Debug Register (CPO Register 23) 


Compliance Level: Optional. 


The Debug register is part of the EJTAG specification. Refer to that specification for the format and description of this 
register. 
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4.9.23 DEPC Register (CPO Register 24) 


Compliance Level: Optional. 


The DEPC register is part of the EJTAG specification. Refer to that specification for the format and description of this 
register. 


All bits of the DEPC register are significant and must be writable. 


4.9.24 Performance Counter Register (CP0 Register 25) 


Compliance Level: Recommended. 


The MIPS64 Architecture supports implementation dependent performance counters that provide the capability to 
count events or cycles for use in performance analysis. If performance counters are implemented, each performance 
counter consists of a pair of registers: a 32-bit control register and a 32-bit counter register. To provide additional 
capability, multiple performance counters may be implemented. 


Performance counters can be configured to count implementation dependent events or cycles under a specified set of 
conditions that are determined by the control register for the performance counter. The counter register increments 
once for each enabled event. When bit 31 of the counter register is a one (the counter overflows), the performance 
counter optionally requests an interrupt that is combined in an implementation dependent way with hardware inter- 
rupt 5 to set interrupt bit IP(7) in the Cause register. Counting continues after ‘counter register overflow whether or 
not an interrupt is requested or taken. i 


Each performance counter is mapped into even-odd select values of the F fi Cnt reset Even selects access the con- 


how they map into the select values of the PerfCnt feoistet 


Table 82: Example Performance Co 


PerfCnt 
Register Select 
Value ©” 


Performance 
Counter 


also possible, extending the select field in an obvious way to obtain 
the desired number of performance counters. Software may determine if at least one pair of Performance Counter 
Control and Counter registers is implemented via the PC bit in the Config! register. If the M bit is one in the Perfor- 
mance Counter Control register referenced via a select field of ‘n’, another pair of Performance Counter Control and 
Counter registers is implemented at the select values of ‘n+2’ and ‘n+3’. 


The Control Register associated with each performance counter controls the behavior of the performance counter. 
Figure 34 shows the format of the Performance Counter Control Register; Table 83 Gescnbes the Performance 
Counter Control Register fields. Y 
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Figure 34: Performance Counter Control Register Format 


31 30 11 10 


Me ~*YSC ee fie [OS 


Table 83: Performance Counter Control Register Field Descriptions 


) Fields Read/ 
Description Reset State | Compliance 
17 Ac ue 
Name 


If this bit is a one, another pair of Performance 
Counter Control and Counter registers is imple- 

mented ata MTCO or MFCO select field value of 
‘n+2’ and ‘n+3’. 


| Reserved | 


Selects the event to be counted by the corre- — 


ee 
sponding Counter ee The list of events:is a 


Interrupt Enable. nables the interrupt request - Required 
when the corresponding counter overflows (bit 


31 of the counter is one). 


Note that this bit simply enables the interrupt 
request. The actual interrupt is still gated by the 
normal interrupt masks and enable in the Status 
register. 


0: Performance counter interrupt disabled 
1: Performance counter interrupt enabled 


November 15, 1999 - 138 - 


MIPS® PROPRIETARY/CONFIDENTIAL: 
RESTRICTED DOCUMENT SUBJECT TO CONFIDENTIALITY OBLIGATIONS. DUPLICATION IS PROHIBITED. 


Revision 1.0 MIPS64™ Specification 


- 


Table 83: Performance Counter Control Register Field Descriptions 


Description Write Reset State | Compliance 


F agndenned 4 Required 


Undefined Required 


Enables event counting in User Mode. Refer to 
Section 4.4.4 on page 72 for the conditions under 
which the processor 1s operating in User Mode. 


0: Disable event counting in User Mode 
1: Enable event counting in User Mode 


Enables event counting in Supervisor Mode (for 
those processors that implement Supervisor 
Mode). Refer to Section 4.4.3 on page 72 for the 
conditions under which the processor is operat- 
ing in Supervisor mode. 


If the processor does not implement Supervisor | 
Mode, this bit must be ignored on write and ~ 
retum zero on read. 


Undefined Required 


counting only when the E: 
Status register are zero. 


Undefined Required 


Status register i nd the ERL bit in the Sta- 


tus register 1S Zero. 


0: Disable event counting while EXL = 1, 

ERL=0 
1: Enable event counting while EXL = 1, 
ERL = 0 


Counting is never enabled when the ERL bit in 
the Status register is one. 


The Counter Register associated with each performance counter increments once for each enabled event. Figure 35 
shows the format of the Performance Counter Counter Register; Table 84 describes the Performance Counter Counter 
Register fields. 7 
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Figure 35: Performance Counter Counter Register Format 


Event Count 


Table 84: Performance Counter Counter Register Field Descriptions 


Description Reset State | Compliance 
Name | Bits ie 
Name 
Event 31:0 | Increments once for each event that is enabled by | RW F adeaned. PF mequea: f 
Count the corresponding Control Register. When bit 31 
is One, an interrupt request is made if the IE bit in 
the Control Register is one. | . 


4.9.25 ErrCtl Register (CPO Register 26, Select 0) 


Compliance Level: Optional. 


terface with the error detection mechanisms 
lementations to read and write parity or 
.conjunction with specific encodings of 
nethod. The exac format of the ErrCtl register is imple- 
c sor specification for the format of this 


The ErrCtl register provides an implementation dependent diagnostic 
implemented by the processor. This register has been used in pre 
ECC information to and from the primary or secondary cache da 
the Cache instruction or other implementation-dependen 


Compliance Level: Optional. 


. fae jth . 
The CacheErr register provides an interface with the cac le error detection logic that may be implemented by: pro- 
cessor. he 


we 36 shows the example format of the CacheErr register; Table 85 describes the CacheErr register fields. 
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The ErrorEPC register is a read-write register, similar to the EPC register, except that ErrorEPC is used on error 
exceptions. All bits of the ErrorEPC register are significant and must be writable. It is also used to store the program 
counter on Reset, Soft Reset, Nonmaskable Interrupt (NMI), and Cache Error exceptions. 


The ErrorEPC register contains the virtual address at which instruction processing can resume after servicing an 
error. ErrorEPC contains either: 


¢ the virtual address of the instruction that was the direct cause of the exception, or 
* the virtual address of the immediately preceding branch or jump instruction when the error causing instruc- 
tion is in a branch delay slot. 


Unlike the EPC register, there is no corresponding branch delay slot indication for the ErrorEPC register. 


Figure 41 shows the format of the ErrorEPC register; Table 90 describes the ErrorEPC register fields. 


Figure 41: ErrorEPC Register Format 


63 0 


ErrorEPC 


Table 90: ErrorEPC Register Field Descriptions a 


7 Compliance 


Reset State . 


ErrorEPC 63:0 


f to that specification for the format and description of 


this register, = 


4.10 CPO Hazards 


Because resources controlled \ via Copro ) affect the operation of various pipeline stages of a MIPS64 proces- 
sor, manipulation of these resources may produce results that are not detectable by subsequent instructions for some 
number of execution cycles. When no hardware interlock exists between one instruction that causes an effect that is 
visible to a second instruction, a CPO hazard exists. Some MIPS implementations have placed the entire burden on 
the kernel programmer to pad the instruction stream in such a way that the second instruction is spaced far enough 
from the first that the effects of the first are seen by the second. Other MIPS implementations have added full hard- 
ware interlocks such that the kernel programmer need not pad. The trade-off is between kernel software changes for 
each new processor vs. more complex hardware interlocks required in the processor. 


The MIPS64 Architecture does not dictate the solution that is required for a compatible implementation. The choice 
of implementation ranges from full hardware interlocks to full dependence on software padding, to some combination 
of the two. For an implementation choice that relies on software padding, Table 91 lists the “typical” spacing required 
to allow the consumer to eliminate the hazard. The “typical’’ values shown in this table represent spacing that 1s in 
common use by operating systems today. An implementation which requires less spacing to clear the hazard (includ- 
ing one which has full hardware interlocking) should operate correctly with and operating system which uses this 
hazard table. An implementation which requires more spacing to clear the hazard incurs the burden of validating ker- 
nel code against the new hazard requirements. 


Note that, for superscalar MIPS implementations, the number of instructions issued per cycle may be greater than 
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one, and thus that the duration of the hazard in instructions may be greater than the duration in cycles. It is for this 
reason that MIPS64 defines the SSNOP instruction to convert instruction issues to cycles in a superscalar design. 


Table 91: ““Typical’’ CP0 Hazard Spacing 


“Typical” 
Spacing 
(Cycles) 


TLBP, TLBR TLB entry 
Load/store using new TLB entry TLB entry 
Instruction fetch using new TLB TLB entry a 
entry 

MTCO Status[CU} en instruction needs CU Status[CU} = 


| mrcosmus = BRET Status ERET J Status 


Hazard 
On 


Producer Consumer 


TLBWR, TLBWI = 


MTCO Status[IE] =? Interrupted Instruction 


MFCO0 EntryHi 
MFCO PageMask 


a. 2. — s tatus[IE] 


TLBR —_ 


MTCO EntryLo0 


MTCO EntryLol 

MTCO Entry Hi =a aah : 

MTCO PageMask TLBWR PageMask 
MTCO Index Index 


MTCO EPC 
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Appendix A Alternative MMU Organizations 


The main body of this specification describes the TLB-based MMU organization. This appendix describes other 
potential MMU organizations. 


A.1 Fixed Mapping MMU 


As an alternative to the full TLB-based MMU, the MIPS64 Architecture supports a lightweight memory management 
mechanism with fixed virtual-to-physical address translation, and no memory protection beyond what is provided by 
the address error checks required of all MMUs. This may be useful for those applications which do not require the 
capabilities of a full TLB-based MMU. It is not anticipated that MIPS64 processors that implement a fixed-mapping 
MMU will require a 64-bit address capability. As a result, the description below is given assuming a 32-bit address. 


A.1.1 Fixed Address Translation 
Address translation using the Fixed Mapping MMU 1s done as follows: 


¢ Kseg0O and Kseg] addresses are translated in an identical manner to the TLB- based MMU: they both map to 
the low 512MB of physical memory, esse 

¢ Useg/Suseg/Kuseg addresses are mapped by adding 1GB to the dieaal sides! when the ERL bit is zero in 
the Status register, and are mapped using an identity mapping when the oe bit is One in the Status register. - 

¢  Sseg/Ksseg/Kseg2/Kseg3 addresses are mapped using an identity mapping.» ‘ 


Table 92 lists all mappings from virtual to physical addresses. Note that add 5$ error checking 1s still done before the 
translation process. Therefore, an attempt to reference kseg0 from User Mode still results in an address error excep- 
tion, just as it does with a TLB-based MMU. | 


Table 92: Physical Address ‘s 


Segment ow 
ane @ tz cay Statuspry = 1 


0x 0000 0000 
through 


600 Ao Ox 0000 0000 
through 
Ox [FFF FFFF 


0x A000 0000 0x 0000 0000 
through through 
Ox BFFF FFFF Ox LFFF FFFF 


Ox C000 0000 0x C000 0000 
through -.- through 
Ox DFFF FFFF Ox DFFF FFFF 


Ox E000 0000 Ox E000 0000 
through through 
Ox FFFF FFFF Ox FFFF FFFF 


Note that this mapping means that physical addresses 0x2000 0000 through Ox3FFF FFFF are inaccessible when the 
ERL bit is off in the Status register, and physical addresses 0x8000 0000 through OxBFFF FFFF are inaccessible 
when the ERL bit is on in the Status register. 
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Figure 42 shows the memory mapping when the ERL bit in the Status register is zero; Figure 43 shows the memory 
mapping when the ERL bit is one. COE arid 


Figure 42: Memory Mapping when ERL = 0 


Ox FFFF FFFF 


Ox FFFF FFFF 


Ox E000 0000 Ox E000 0000 


Ox C000 0000 


Ox C000 0000 
Ox A000 0000 


Ox 8000 0000 


flag, 


Ox 4000 0000 
Ox 2000 0000 


Ox 0000 0000 0x 0000 0000 
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Figure 43: Memory Mapping when ERL = 1 


Ox FFFF FFFF Ox FFFF FFFF 


Ox E000 0000 


Ox E000 0000 


Ox C000 0000 


Ox A000 0000 


Ox 8000 0000 


Ox 8000 0000 


Ox 0000 0000 Ox 0000 0000 


A.1.2 Cacheability Attributes 


Because the TLB provided the cacheability attributes 

required to replace this capability when tl ait i 
fig register whose encoding is identical. to that o 
trol the cacheability of the kseg2/kseg3 and the kt 
Status register, kuseg references are always: treated as 
field. j 


The cacheability attributes for ksegO and ksegl are provided in the same manner as for a TLB-based MMU: the 
cacheability attribute for kseg0 comes from the KO field of Config, and references to kseg1 are always uncached. 


the kuseg, kseg2, and kseg3 segments, some mechanism is 
MMU is used. Two additional fields are-added to the Con- 
O field. These additions are the K23 and KU fields which con- 
egments, respectively. Note that when the ERL bit is on in the 
cacheable references, independent of the value of the KU 


Figure 44 shows the format of the additions to the Config register; Table 93 describes the new Config register fields. 
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Figure 44: Config Register Additions 


31 30 28 27 25 24 16 15 141312 109 


Mee] «BR aap] «dR 


Table 93: Config Register Field Descriptions 


) Fleas Read/ 
Description Reset State | Compliance 
= ve 
Name 
font 28 | Kseg2/Kseg3 coherency algorithm. See Table 62 T angenaea 4 Penna o 
a the encoding of this field. 
27:25. | Kuseg coherency algorithm when Statusgpy is Undefined Optional 
zero. See Table 62 for the encoding of this field. 


A.1.3 Changes to the CP0 Register Interface 


Relative to the TLB-based address translation mechanism, the following Shan ee ar necessary to. the CPO. register : 
interface: 


¢ The Index, Random, EntryLo0, EntryLol, Context, PageMask, Wit 
required and may be removed P 
* The TLBWR, TLBWI, TLBP, and TLBR instructions are 
Instruction Exception — 


d Entry Hi registers are no longer 


> 


0: longer Raye and should cause a Resewed 


| A.2 Block Address Translation 


This section describes the architecture for a block address translation (BAT) mechanism that reuses Se ate daa 
ware and software interface that exists for a TL 


.B-Based virtual ; ddress translation mechanism. This ae has 
the following features: 


46 aah: 


¢ It preserves as much as possible: 
¢ It provides independent base-and-bou 

ences. : 
¢ It provides optional support fo 


king’and relocation for instruction references and data refer- 


s relocation of kseg2 and kseg3 virtual address regions 


A.2.1 BAT Organization 


The BAT is an indexed structure which is used to translate virtual addresses. It contains pairs of instruction/data 
entries which provide the base-and-bounds checking and relocation for instruction references and data references, 
respectively. Each entry contains a page-aligned bounds virtual page number, a base page frame number (whose 
width is implementation dependent), a cache coherence field (C), a dirty (D) bit, and a valid (V) bit. Figure 45 shows 
the logical arrangement of a BAT entry. 
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Figure 45: Contents of a BAT Entry 


Bounds VPN 


ee 


The BAT is indexed by the reference type and the address region to be checked as shown in Table 94. 


Table 94: BAT Entry Assignments 


Entry Index Address Region 


ee 
a 


Entries 0 and 1 are required. Entries 2 and 3 and 4 

the needs of the particular implementation. If entries fo 
dependent how, if at all, these address regions: are transl 
kseg3 into-a single pair of instruction/data entries. Software ma: 
by looking at the MMU Size field of the Config/ re j 


‘and may e implemented as necessary to address 
Seg3 are not implemented, it is implementation- 


- One alternative is to combine the mapping for kseg2 and 
etermine how many BAT entries are implemented 


A.2.2 Address Translation 


When a virtual address translation is requested, the BAT entry that is appropriate to the reference type and address 
region is read. If the virtual address is greater than the selected bounds address, or if the valid bit is off in the entry, a 
TLB Invalid exception of the appropriate reference type is initiated. If the reference is a store and the D bit is off in 
the entry, a TLB Modified exception is initiated. Otherwise, the base PFN from the selected entry, shifted to align 
with bit 12, is added to the virtual address to form the physical address. The BAT process can be described as follows: 


i < SelectIndex (reftype, va) __ 
bounds ~ BATTilpounasven | 11° 
pm <— BATTil] gasepEN 

c¢ BAT[i]c 

d — BAT[i]p 

v¢ BAT{ily 
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if (va > bounds) or (v = 0) then 
InitiateTLB InvalidException(reftype) 

endif 

if (d = 0) and (reftype = store) then 
InitiateTLB ModifiedException() 

endif 


pa < va + (pfn || o!2) 


Making all addresses out-of-bounds can only be done by clearing the valid bit in the BAT entry. Setting the bounds 
value to zero leaves the first Virtual page mapped. 


A.2.3 Changes to the CP0 Register Interface 


Relative to the TLB-based address translation mechanism, the following changes are necessary to the CPO register 
interface: | | 


¢ The Index register is used to index the BAT entry to be read or written by the TLBWI and TLBR instruc- 
tions. 

¢ The EntryHi register is the interface to the BoundsVPN field in the BAT-entry. 

¢ The EntryLo0 register is the interface to the BasePFN and C, D, and V fields of the BAT entry. The register 
has the same format as for a TLB-based MMU. 

¢ The Random, EntryLol, Context, PageMask, and Wired registe 
write to these registers is UNDEFINED. 

¢ The TLBP and TLBWR instructions are unnecessary. The TLBWI and TLBR instructions reference the 
BAT entry whose index is contained in the Index register. The effects of executing a TLBP or TLBWR are 
UNDEFINED, but processors should prefer a Reserved Instruction Exception. 


ed. The effects of a read or - 
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